Mobile Device Systems Administrator

GovCIO is currently hiring for a Mobile Device System Administrator to manage the Naval Criminal Investigation Service's Mobile Device Management systems. This position will be located in Quantico, VA and will be an onsite position.

Responsibilities

Establishes and maintains smooth operation of computer systems (to include operating systems, software and hardware) in networked or stand-alone configurations, maintains system integrity, and upgrades systems and/or servers as required. May create and document new methods supporting network/system operations and implement changes to procedures. Consults with support teams, help desks, customers and other technical staff in the resolution of problems, coordinates and performs operation and/or maintenance activities for networks/servers, identifies recurring problems and recommends steps to reduce the severity or frequency of problems. May plan for the transition of development and/or production environments to new technologies, utilize system software to monitor the performance of system files, manage system data to maintain performance efficiencies and/or study system requirements to determine proper server installation methods and procedures.

• Maintain and administer computer networks and related computing environments, including computer hardware, systems software, applications software, and all configurations.
• Plan, coordinate, and implement network/system security measures in order to protect data, software, and hardware.
• Provides regular monitoring and analysis regarding short and long-range planning for in-house systems.
• Prepares or ensures that appropriate documentation exists, including operational instructions.
• Writes or modifies basic scripts to resolve performance problems and automate administration tasks.
• Recommend changes to improve systems and network configurations, and determine hardware or software requirements related to such changes.

Project Scope:

• Provides operational maintenance, Tier 2-3 configuration changes, administration and updates for Ivanti MDM, Sentry, and MTD solution.
• Experienced MDM Systems Administrator to manage, maintain, and optimize our enterprise mobile and endpoint device fleet.
• Primary subject matter expert for Ivanti UEM environment, ensuring security, compliance, and seamless end-user experience across iOS, and Windows devices. (Android and macOS desired, not required)
• Working knowledge and experience with Microsoft Intune for endpoint management architecture and modern workplace integrations.

Client-specific responsibilities:

• Ivanti Platform Administration: Architect, configure, and maintain the Ivanti UEM environment (core server/cloud tenant, Sentry, Access, and client configurations).
• Device Lifecycle Management: Oversee end-to-end device onboarding and/or migrations, zero-touch enrollment (Apple Business Manager, Android Enterprise), configuration, and decommissioning. (Windows Autopilot desired, not required)
• Security & Compliance: Deploy and enforce compliance baselines, conditional access, encryption (BitLocker/FileVault), Mobile Application Management (MAM) policies, and certificate management (SCEP/PKI).
• Intune Operations & Integration: Support modern management initiatives within Microsoft Intune; manage co-existence, policy parity, or migration efforts between Ivanti and Microsoft Endpoint Manager.
• Application Distribution: Package, test, and deploy enterprise applications, in-house apps, and public store apps across mobile and desktop endpoints.
• Escalation Support: Provide Tier 3 technical escalation support for complex device connectivity, authentication, and policy enforcement issues.
• Automation & Documentation: Develop scripting (PowerShell, Bash) to automate administrative tasks; maintain comprehensive architecture diagrams and standard operating procedures (SOPs).

Qualifications

High School with 9+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: Top Secret/SCI
• Certifications: CompTIA Security +
• Experience: 4+ years of dedicated hands-on experience in enterprise Mobile Device Management (MDM) / Unified Endpoint Management (UEM).
• Ivanti Expertise: Demonstrated, in-depth expertise administering Ivanti Neurons for UEM / Ivanti Endpoint Manager Mobile (Core/Cloud) and associated components.
• OS Competence: Strong administration skills across major mobile and desktop operating systems (iOS, iPadOS, Android Enterprise, Windows 10/11, macOS).
• Identity & PKI: Solid understanding of enterprise identity and authentication mechanisms, including Entra ID (Azure AD), Active Directory, SCEP/PKI certificate enrollment, and Single Sign-On (SSO).
• Problem-Solving: Proven ability to troubleshoot complex device enrollment, network access, and policy delivery issues independently.

Preferred Skills and Experience

• Microsoft Intune Experience: Proven experience administering Microsoft Intune / Microsoft Endpoint Manager, including policy creation, app protection, and conditional access.
• Platform Migration: Prior experience planning or executing MDM migrations (e.g., Ivanti/MobileIron to Intune).
• Scripting: Proficiency with PowerShell, Graph API, or Bash for endpoint management and reporting.
• Certifications: Ivanti Certified Professional, Microsoft 365 Certified: Endpoint Administrator Associate [MD-102].

Posted Salary Range

USD $120,000.00 - USD $140,000.00 /Yr. Establishes and maintains smooth operation of computer systems (to include operating systems, software and hardware) in networked or stand-alone configurations, maintains system integrity, and upgrades systems and/or servers as required. May create and document new methods supporting network/system operations and implement changes to procedures. Consults with support teams, help desks, customers and other technical staff in the resolution of problems, coordinates and performs operation and/or maintenance activities for networks/servers, identifies recurring problems and recommends steps to reduce the severity or frequency of problems. May plan for the transition of development and/or production environments to new technologies, utilize system software to monitor the performance of system files, manage system data to maintain performance efficiencies and/or study system requirements to determine proper server installation methods and procedures.

• Maintain and administer computer networks and related computing environments, including computer hardware, systems software, applications software, and all configurations.
• Plan, coordinate, and implement network/system security measures in order to protect data, software, and hardware.
• Provides regular monitoring and analysis regarding short and long-range planning for in-house systems.
• Prepares or ensures that appropriate documentation exists, including operational instructions.
• Writes or modifies basic scripts to resolve performance problems and automate administration tasks.
• Recommend changes to improve systems and network configurations, and determine hardware or software requirements related to such changes.

Project Scope:

• Provides operational maintenance, Tier 2-3 configuration changes, administration and updates for Ivanti MDM, Sentry, and MTD solution.
• Experienced MDM Systems Administrator to manage, maintain, and optimize our enterprise mobile and endpoint device fleet.
• Primary subject matter expert for Ivanti UEM environment, ensuring security, compliance, and seamless end-user experience across iOS, and Windows devices. (Android and macOS desired, not required)
• Working knowledge and experience with Microsoft Intune for endpoint management architecture and modern workplace integrations.

Client-specific responsibilities:

• Ivanti Platform Administration: Architect, configure, and maintain the Ivanti UEM environment (core server/cloud tenant, Sentry, Access, and client configurations).
• Device Lifecycle Management: Oversee end-to-end device onboarding and/or migrations, zero-touch enrollment (Apple Business Manager, Android Enterprise), configuration, and decommissioning. (Windows Autopilot desired, not required)
• Security & Compliance: Deploy and enforce compliance baselines, conditional access, encryption (BitLocker/FileVault), Mobile Application Management (MAM) policies, and certificate management (SCEP/PKI).
• Intune Operations & Integration: Support modern management initiatives within Microsoft Intune; manage co-existence, policy parity, or migration efforts between Ivanti and Microsoft Endpoint Manager.
• Application Distribution: Package, test, and deploy enterprise applications, in-house apps, and public store apps across mobile and desktop endpoints.
• Escalation Support: Provide Tier 3 technical escalation support for complex device connectivity, authentication, and policy enforcement issues.
• Automation & Documentation: Develop scripting (PowerShell, Bash) to automate administrative tasks; maintain comprehensive architecture diagrams and standard operating procedures (SOPs).

High School with 9+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: Top Secret/SCI
• Certifications: CompTIA Security +
• Experience: 4+ years of dedicated hands-on experience in enterprise Mobile Device Management (MDM) / Unified Endpoint Management (UEM).
• Ivanti Expertise: Demonstrated, in-depth expertise administering Ivanti Neurons for UEM / Ivanti Endpoint Manager Mobile (Core/Cloud) and associated components.
• OS Competence: Strong administration skills across major mobile and desktop operating systems (iOS, iPadOS, Android Enterprise, Windows 10/11, macOS).
• Identity & PKI: Solid understanding of enterprise identity and authentication mechanisms, including Entra ID (Azure AD), Active Directory, SCEP/PKI certificate enrollment, and Single Sign-On (SSO).
• Problem-Solving: Proven ability to troubleshoot complex device enrollment, network access, and policy delivery issues independently.

Preferred Skills and Experience

• Microsoft Intune Experience: Proven experience administering Microsoft Intune / Microsoft Endpoint Manager, including policy creation, app protection, and conditional access.
• Platform Migration: Prior experience planning or executing MDM migrations (e.g., Ivanti/MobileIron to Intune).
• Scripting: Proficiency with PowerShell, Graph API, or Bash for endpoint management and reporting.
• Certifications: Ivanti Certified Professional, Microsoft 365 Certified: Endpoint Administrator Associate [MD-102].