Mindgrub Technologies is a digital agency specializing in digital transformation for established enterprises and growth-stage companies. We build complex, deeply integrated applications that power critical experiences for enterprises and startups alike. Our engineering teams work across web, mobile, and cloud platforms, delivering solutions that range from multi-million dollar platform modernizations to fast-moving, high-impact digital builds. Position Overview We are seeking a highly experienced iOS networking specialist for a short-term technical discovery engagement focused on secure network access and browser-based protection on Apple mobile devices. This is a time-boxed architectural and investigative engagement, not an implementation role. The objective is to evaluate feasibility, define architectural direction, identify risks, and produce clear technical guidance that will inform future product development. You will assess how an existing enterprise security platform could be extended to iOS while operating within Apple platform constraints and enterprise device management models. Responsibilities - Lead a deep technical discovery of iOS networking capabilities related to secure traffic routing, enterprise access, and managed application controls - Evaluate the use of Apple NetworkExtension frameworks, including Packet Tunnel Provider, for implementing a custom VPN based traffic steering solution - Assess feasibility of per app VPN models tied to managed browser applications such as enterprise managed Chrome or Edge, or a custom secure browser - Define how authentication state can dynamically control access to internal enterprise resources while maintaining baseline internet protection - Analyze mobile device management requirements, including supervised device considerations, configuration deployment, and policy enforcement - Document architectural options, tradeoffs, and constraints imposed by Apple platform policies and APIs - Identify integration points with existing security infrastructure, including certificate handling, identity flows, and remote configuration - Define emergency control and fail safe behaviors appropriate for enterprise security environments - Produce a clear set of technical findings, risks, and recommended architecture to guide downstream product development Required Experience - Deep expertise with iOS networking and Apple NetworkExtension framework, especially NEPacketTunnelProvider - Proven experience designing or implementing VPN or secure network routing solutions on iOS - Strong understanding of per app VPN, managed app configuration, and mobile device management frameworks - Experience integrating authentication and identity systems with mobile networking behavior - Familiarity with enterprise security concepts such as zero trust access, secure web gateways, or secure access service edge models - Ability to translate complex platform constraints into clear architectural guidance - Experience producing technical discovery reports, architecture documents, and feasibility assessments Preferred Experience - Background in secure browser technologies or enterprise mobility security - Experience working with OpenVPN or other VPN protocol integrations within mobile platforms - Familiarity with Apple enterprise deployment programs and app extension distribution models Engagement Deliverables - Platform capability assessment and constraints summary - Recommended high level architecture for iOS - Key technical risks and mitigation strategies - Decision framework for browser strategy, VPN model, and device management dependencies - Implementation readiness guidance for engineering teams Compensation - $90.00 - $120.00 USD per hour - Base compensation will be determined based on a variety of factors including skills, education, certifications, and overall experience for this role. Inclusivity without exception | At Mindgrub we value and encourage mutual respect and acceptance. We know we all have something to contribute. We work every day to ensure all are welcome, and that we treat all people with fairness and dignity. No phone calls or recruiters, please. #LI-Remote

• Build high-quality, scalable mobile applications. • Contribute to modern native iOS development using Swift and SwiftUI. • Collaborate with cross-functional teams. • Support the continuous improvement of engineering practices.

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description The Senior Azure Architect Identity & Endpoint Engineer designs, implements, and manages enterprise identity and endpoint services within Microsoft Azure. This role serves as the technical authority for identity, access, and endpoint configuration services across cloud and hybrid environments. - Design, implement, and maintain enterprise identity architectures within Microsoft Azure, supporting secure authentication, authorization, and access management across cloud and hybrid environments - Serve as the technical authority for identity and access management (IAM) solutions, including Microsoft Entra ID (Azure AD), ADFS, and hybrid identity integrations - Architect and manage endpoint engineering and device management solutions, leveraging Microsoft Endpoint Configuration Manager (MECM/SCCM) and Microsoft Intune - Define and enforce identity and endpoint standards, policies, and configurations to ensure consistency, security, and scalability across the enterprise - Design and support identity federation, single sign-on (SSO), conditional access, and authentication flows across enterprise systems - Integrate identity and endpoint services with Azure-hosted workloads and on-premises infrastructure - Collaborate with Information Assurance and cybersecurity teams to design and implement security controls related to identity, access, and endpoint management - Support compliance, audit, and authorization activities by providing architecture documentation, control mappings, and technical guidance - Lead troubleshooting and resolution of complex identity and endpoint issues, including authentication failures, access problems, and device compliance issues - Evaluate and recommend improvements to identity and endpoint architectures, balancing security, usability, and operational impact - Guide system and platform engineers on identity integration patterns and endpoint management best practices - Maintain authoritative architecture diagrams, standards, and technical documentation for identity and endpoint services - Support lifecycle activities for identity and endpoint platforms, including upgrades, migrations, and modernization efforts - Participate in strategic planning and technical reviews to ensure identity and endpoint services align with enterprise architecture and mission needs Qualifications - Bachelor’s degree in IT, Cybersecurity, or related field OR equivalent combination of education, training, and experience - Minimum 4 years of relevant experience (with significant depth in identity and endpoint engineering) Requirements - Proven experience managing identity services within Microsoft Azure - Microsoft Certified: Azure Administrator Associate or higher - Must meet DoD 8570 / 8140 IAT-II requirements (examples in the table include Security+, SSCP, GSEC, etc.) - Active Secret clearance - Technical expertise in Microsoft Entra ID (Azure AD), ADFS and hybrid identity architectures, Microsoft Endpoint Configuration Manager (MECM / SCCM), and Microsoft Intune Company Description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today! Job Details Summary : We are seeking a highly skilled and experienced Senior Endpoint Engineer to join our team. This role is primarily focused on Active Directory, Group Policy Management, and Intune policies as they relate to endpoints and users. The ideal candidate will have a proven track record of designing, implementing, and optimizing endpoint engineering solutions in large-scale environments while ensuring seamless integration with organizational goals and user productivity. This position requires a proactive, self-motivated individual who thrives in a fast-paced, global environment, managing multiple responsibilities, projects, and demands across various time zones with minimal oversight. Key Responsibilities: Active Directory, Group Policy Management, and Intune Policy Engineering. Design, implement, and manage Active Directory and Group Policies to support endpoint and user requirements across a global organization. Required Qualifications: 10 or more years of experience in endpoint engineering, with a primary focus on Active Directory, Group Policy Management, and Intune policies as they relate to endpoints and users. Proven expertise in managing endpoint platforms such as MECM, Intune, Jamf, NinjaOne, and other similar tools. Demonstrated ability to transition on-premises policies to cloud-based solutions, particularly Intune, and prepare for Microsoft Entra migrations. Experience with Microsoft cloud-native technologies, including Microsoft Graph API, Azure Active Directory, and related tools for endpoint management and automation. Exceptional troubleshooting skills across endpoint engineering platforms, operating systems, and user domains. Experience navigating large global organizations with tens of thousands of users and endpoints, including integrated and non-integrated entities. Self-starter with a proactive mindset, capable of managing multiple responsibilities, projects, and demands in a highly dynamic global environment across multiple time zones. Ability to work independently with minimal oversight, driving initiatives forward while maintaining accountability and focus. Strong collaboration skills to engage effectively across domains and organizational levels, ensuring alignment between infrastructure, security, and business teams. Preferred Qualifications: Experience working in enterprise-scale environments with complex endpoint requirements. Certifications such as Microsoft Certified: Endpoint Administrator Associate, Azure Solutions Architect, or similar. Strong familiarity with Microsoft Entra and its integration into endpoint and identity management strategies. Key Competencies: Technical Expertise: Deep understanding of Active Directory, Group Policy, Intune policies, and endpoint engineering platforms. Self-Motivation and Independence: Ability to work autonomously, managing competing priorities and navigating complex global environments with confidence and efficiency. User-Centric Approach: Ability to prioritize user experience and productivity in policy design and implementation. Problem-Solving: Proficiency in identifying and resolving complex endpoint engineering issues. Collaboration: Strong ability to work across teams and domains, fostering partnerships between infrastructure, security, and business units. Communication: Ability to clearly articulate technical concepts and advocate for user experience in cross-functional discussions. What Cencora offers We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members' ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora Full time Equal Employment Opportunity Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email hrsc@cencora.com. We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returned Affiliated Companies Affiliated Companies: AmerisourceBergen Services Corporation