Apple MDM / iPhone Management Expert

Apple MDM / iPhone Management Expert We’re looking for someone experienced with Apple MDM and company-managed iPhones. We already have our networking architecture in place. Now we need someone to help us properly manage the iPhones our remote employees use. This will be an hourly contract. The first step is to validate that what we want is technically possible. If it is, we’ll move straight into implementation. What we want We have company-owned work iPhones used by remote employees. We want them to be as locked down as reasonably possible while still being easy for employees to use. The goal is to prevent accidental mistakes, not make the phones difficult to use. Requirements We’d like to know if it’s possible to: Prevent users from disabling the VPN. Prevent users from turning off Airplane Mode (if possible). Prevent users from changing critical network settings. Prevent users from removing the VPN configuration. Prevent users from installing or removing apps. Force all internet traffic through Tailscale. If the VPN is disconnected or unavailable, the phone should have no internet connection at all (no fallback to local Wi-Fi or cellular). Remotely manage all company phones. Make onboarding new phones simple and repeatable. If any of the above isn’t possible, we’d like to know the closest practical alternative. Current setup Company-owned iPhones Remote employees Existing Tailscale deployment Existing networking infrastructure If it’s possible We’ll hire you to: Set up Apple Business Manager (if required) Configure the MDM Enroll our first devices Deploy Tailscale Configure all required restrictions and policies Test everything Document the setup so we can easily add new phones in the future Please answer when applying Which Apple MDM platform would you recommend for this project, and why? Have you managed company-owned iPhones before? Have you deployed Tailscale through Apple MDM? Looking at our requirements, do you believe they’re fully achievable, partially achievable, or not achievable? Please briefly explain. Approximately how many hours do you think the initial implementation will take?