Apple MDM Expert | iPhone Management | Apple Business Manager

Summary Job Overview We're looking for an experienced Apple MDM / iPhone Management Expert to help us manage and secure company-owned iPhones used by our remote employees. Our networking infrastructure is already in place. The initial phase of this project is to evaluate whether our security and device management requirements are technically achievable. If they are, we'll move forward with implementation. This is an hourly contract with the opportunity for ongoing work. Project Goals Our objective is to keep company-owned iPhones as secure and locked down as reasonably possible while ensuring they're still easy for employees to use. The focus is on preventing accidental changes without creating unnecessary complexity for end users. What We Need We'd like to confirm whether it's possible to: - Prevent users from disabling the VPN - Prevent users from enabling Airplane Mode (if technically possible) - Prevent users from modifying critical network settings - Prevent users from removing the VPN configuration - Prevent users from installing or removing apps - Force all internet traffic through Tailscale - Ensure that if the VPN disconnects or becomes unavailable, the device has no internet access (no fallback to Wi-Fi or cellular) - Remotely manage all company-owned iPhones - Make onboarding new devices simple, repeatable, and scalable If any of these requirements can't be fully met, we'd appreciate recommendations for the closest practical solution. Current Setup - Company-owned iPhones - Remote employees - Existing Tailscale deployment - Existing networking infrastructure Scope of Work (Implementation Phase) If the proposed solution is achievable, you'll be responsible for: - Setting up Apple Business Manager (if required) - Configuring the MDM solution - Enrolling company devices - Deploying Tailscale - Applying the required security policies and restrictions - Testing the complete configuration - Documenting the setup so future devices can be onboarded easily and consistently Required Experience We're looking for someone with experience in one or more of the following: - Apple MDM - Apple Device Management - Apple Business Manager - Apple Business Essentials - Jamf Pro - Kandji - Mosyle - SimpleMDM - Microsoft Intune (Apple) - Workspace ONE (Apple) - Enterprise Mobility Management - Apple Endpoint Management - iOS Device Enrollment - VPN deployment and management - Tailscale deployment (preferred) Nice to Have Experience with: - Zero-touch Apple device deployment - Automated Device Enrollment (ADE) - Supervised iOS devices - Configuration Profiles - Enterprise VPN implementations - Network security policies - Remote workforce device management When submitting your proposal, please include: 1. Which Apple MDM solution would you recommend for this environment, and what makes it your preferred choice? 2. Tell us about your experience managing company-owned iPhones or other Apple devices in a business environment. 3. Have you implemented Tailscale using an Apple MDM platform? If yes, briefly describe the deployment. 4. Based on the requirements outlined above, which do you believe are fully achievable, which may require an alternative approach, and why? 5. Approximately how many hours would you estimate for the initial assessment, setup, and implementation?