Mobile App Packaging Specialist

Accountabilities:: Lead enterprise application inventory, analysis, packaging, testing, and deployment across Windows, iOS, and Android platforms. Design, build, modify, sign, and maintain application packages using MSIX, MSIX modification packages, Win32, IntuneWin, and mobile application formats. Manage application ingestion, wrapping, configuration, and deployment through Microsoft Intune as part of the broader UEM modernization initiative. Configure application detection and enforcement rules, dependencies, remediation scripts, assignment strategies, version control, rollout rings, and deployment monitoring. Support iOS application deployment using IPA packages and Volume Purchase Program (VPP)/Apple Business Manager (ABM) integrations, as well as Android deployments using APK/AAB formats and Managed Google Play. Configure and validate MAM policies, application protection policies, conditional launch requirements, data protection settings, and user exception handling. Assess application behavior under MAM policies and validate user experiences across different enrollment and authentication scenarios, including MFA requirements and Intune Company Portal interactions. Conduct functional, compatibility, and performance testing across Windows, iOS, and Android environments to ensure applications are deployment-ready. Troubleshoot application installation failures, certificate and signing issues, missing dependencies, and Intune deployment errors. Analyze technical logs, including Intune Management Extension logs, Windows Event Viewer records, and mobile device logs, to identify root causes and implement corrective actions. Coordinate with application owners, cybersecurity teams, and platform engineering stakeholders to resolve technical issues and support migration activities. Maintain a comprehensive application catalog, dependency records, migration readiness matrices, packaging guides, change documentation, deployment plans, and rollback procedures. Support phased migration waves, ensuring secure, stable, and predictable application deployment experiences. Provide technical leadership and mentorship to junior engineers, contributing to team development and annual performance appraisal input where appropriate. Requirements: Bachelor's degree in Computer Science, Engineering, or another relevant technical discipline, or equivalent professional experience. A Master's degree is preferred. At least 6 years of relevant professional experience in application packaging, software deployment, endpoint management, or a related IT discipline. Advanced proficiency in MSIX packaging, including modification packages, application signing, and package conversion. Strong expertise in Win32 and IntuneWin packaging, including detection and enforcement rules, dependency modeling, and remediation scripting. Hands-on experience deploying iOS applications through IPA packages and VPP/ABM integrations, as well as Android applications through APK/AAB formats and Managed Google Play. Proven experience with Microsoft Intune application wrapping, line-of-business application ingestion, application assignment strategies, version management, rollout rings, and deployment monitoring. Strong understanding of MAM and MDM concepts, including application protection policies, conditional launch controls, data protection requirements, and user exception management. Experience conducting application inventories, analyzing software dependencies, identifying repackaging requirements, and preparing migration readiness assessments. Ability to perform functional, compatibility, and performance testing across Windows, iOS, and Android platforms. Practical experience validating applications under MDM/MAM enrollment scenarios, including MFA authentication flows and Company Portal behavior. Strong troubleshooting skills, particularly with installation failures, signing and certificate issues, dependency conflicts, and Intune deployment errors. Ability to interpret application and endpoint management logs and produce clear root cause analyses. Familiarity with enterprise application security, endpoint management best practices, and Zero Trust principles. Excellent communication, analytical, and problem-solving skills, with the ability to collaborate effectively across technical teams and application stakeholders. Ability to produce clear technical documentation, deployment procedures, change records, and rollback plans. Must be a U.S. citizen with no dual citizenship and able to successfully pass a federal background investigation to obtain access to sensitive information. Preferred Qualifications: Experience supporting large-scale Mobile Device Management (MDM) and Mobile Application Management (MAM) programs. Knowledge of Microsoft Defender for Endpoint application-based mitigations, Attack Surface Reduction (ASR) rules, and application hardening practices. Familiarity with CI/CD pipelines for automated application packaging, code signing, and Intune configuration as code. Experience with certificate-based signing, timestamping authorities, and enterprise Public Key Infrastructure (PKI). Knowledge of Log Analytics and Kusto Query Language (KQL) for application performance monitoring, deployment analytics, and failure tracking. Understanding of Zero Trust security principles, particularly application behavior, data leakage prevention, and policy enforcement. Previous experience with BlackBerry UEM application lifecycle management and federation patterns to support migration planning. Benefits: Annual salary: $103,000–$123,000. Full-time, fully remote work arrangement within the United States. Opportunity to contribute to a large-scale enterprise UEM modernization initiative. Exposure to Microsoft Intune, MSIX, Win32, MAM, and cross-platform application deployment technologies. Opportunity to work on complex enterprise application management and security challenges. Collaborative technical environment involving application owners, cybersecurity specialists, and platform engineering teams. Opportunities to provide technical leadership, mentor colleagues, and contribute to enterprise-wide technology improvements.