Solution Architect

Position Title: Solution Architect
Location: Scarborough, ON
Duration: 6 months

Story Behind the Need
Business group: GTEP – Global Platform Engineering (GPE)
The team designs and deploys solutions for mobile devices and MAC computers using Workspace One.
Project: Our Client is migrating to EntraID as the next-generation Cloud-based iDP and the GPE team has a mandate to integrate (not migrate) Workspace One with Microsoft Entra/Intune to share device compliance status from Workspace One. Deployment of Microsoft Authenticator and Windows Hello for Business (WHfB) for two-factor authentication is also part of the project.
Candidate Value Proposition:
The successful candidate will have the opportunity to work within client. We are technology partners who help the business transform how our employees around the world work. You will get to work with and learn from diverse industry leaders, who have hailed from top technology.
Typical Day in Role:

• Administration of the Workspace One, Intune, and Entra consoles, at an engineering level, as a “console administrator”.
• Follow vendor installation guides to build integration between the three products (Workspace One, Intune, and Entra).
• Enrol a representative sample of Mac computers, iOS and Android devices, into Workspace One
• Follow vendor installation guides to install and configure the required software on test devices consisting of Macs, iPhones/iPads, and Android devices
• Demonstrate that devices are being correctly enrolled in Workspace One, registered in Intune, and device compliance status is being correctly reported from Workspace One to Intune
• Develop test cases and document test procedures
• Develop end-user and technical support guides
• Document the solution architecture and work with security analysts to gain risk acceptance.
• Define and document the structure, connections and relationships of business processes, organizational work groups, data models, applications, user interfaces, applications interfaces, infrastructure, and network topology.
• Contribute to the development of deployment strategies to production / end-user devices

Candidate Requirements/Must Have Skills:

• 5+ years’ hands-on, engineering-level (design/build) experience with VMware Workspace One in a large corporate environment, involving the deployment of a hybrid solution where the UEM console is in the cloud and the on-prem servers (ACC, UAG, SEG) are hosted in a DMZ.
• 5+ years of experience managing mobile devices (Android and iOS) and personal computers running macOS, using Workspace One and/or jamf
• 2-3 years of experience with Identity and Access Management process workflows and troubleshooting, using products such as EntraID, Workspace One Access, Active Directory, ADFS, RADIUS, FIDO, Okta, & SAML-based federations.
• Experience integrating products such as Workspace One UEM, Workspace One Access, Microsoft Intune, and Microsoft EntraID, for the purpose of device compliance and SSO, for devices running Android, iOS, and MacOS.

Nice-To-Have Skills:

• Banking/FI experience, or any regulated environment is an asset.
• Previous experience working as a part of a project team involved in large scale technology deployments.
• Spanish language is an asset.

Soft Skills Required:

• Good technical writing skills to produce technical documentation, security designs, and architectural overviews.
• Excellent written, presentation, and verbal communication skills to be able to work well with technical peers and business stakeholders at different levels within the organization.
• Excellent interpersonal skills
• Self-motivated and proven ability to work independently as well as in a team setting
• Demonstrated ability to handle multiple projects simultaneously and work within tight deadlines
• Fluency in English required, Spanish a definite asset

Education:

• Post-secondary degree/Diploma in a technical field such as computer science, computer engineering or related IT field is a requirement.
• Related industry certifications such as: VMware Certified Professional – Digital Workspace, jamf Certified Associate, Microsoft Certified Azure Administrator, Microsoft 365 Certified Endpoint Administrator, Microsoft Certified Identity and Access Administrator,

Best VS. Average Candidate:

• Extensive and recent hands-on experience with all components of Workspace One, at an engineering level, NOT as Help Desk support or device administrator.
• Extensive experience deploying the on-premise components of Workspace One such as the Airwatch Cloud Connector and the Unversal Access Gateway, in a highly secure environment.

Candidate Review & Selection
1st round – 30 minutes – Teams – HM + Panel (Technical)
2nd round – 30 minutes – Teams – Panel (Technical)