Senior iOS Network Security Architect

Senior iOS Network Security Architect (contract)

Baltimore, Maryland - Remote, U.S.

Mindgrub Technologies is a digital agency specializing in digital transformation for established enterprises and growth‑stage companies. We build complex, deeply integrated applications that power critical experiences for enterprises and startups alike. Our engineering teams work across web, mobile, and cloud platforms, delivering solutions that range from multi‑million dollar platform modernizations to fast‑moving, high‑impact digital builds.

This is a time‑boxed architectural and investigative engagement, not an implementation role. The objective is to evaluate feasibility, define architectural direction, identify risks, and produce clear technical guidance that will inform future product development.

You will assess how an existing enterprise security platform could be extended to iOS while operating within Apple platform constraints and enterprise device management models.

• Lead a deep technical discovery of iOS networking capabilities related to secure traffic routing, enterprise access, and managed application controls
• Evaluate the use of Apple Network Extension frameworks, including Packet Tunnel Provider, for implementing a custom VPN‑based traffic steering solution
• Define how authentication state can dynamically control access to internal enterprise resources while maintaining baseline internet protection
• Analyze mobile device management requirements, including supervised device considerations, configuration deployment, and policy enforcement
• Document architectural options, tradeoffs, and constraints imposed by Apple platform policies and APIs
• Identify integration points with existing security infrastructure, including certificate handling, identity flows, and remote configuration
• Define emergency control and fail‑safe behaviors appropriate for enterprise security environments
• Produce a clear set of technical findings, risks, and recommended architecture to guide downstream product development

• Deep expertise with iOS networking and Apple Network Extension framework, especially NEPacket Tunnel Provider
• Proven experience designing or implementing VPN or secure network routing solutions on iOS
• Strong understanding of per‑app VPN, managed app configuration, and mobile device management frameworks
• Experience integrating authentication and identity systems with mobile networking behavior
• Familiarity with enterprise security concepts such as zero trust access, secure web gateways, or secure access service edge models
• Ability to translate complex platform constraints into clear architectural guidance
• Experience producing technical discovery reports, architecture documents, and feasibility assessments

• Experience working with OpenVPN or other VPN protocol integrations within mobile platforms
• Familiarity with Apple enterprise deployment programs and app extension distribution models
• Platform capability assessment and constraints summary
• Recommended high‑level architecture for iOS
• Key technical risks and mitigation strategies
• Implementation readiness guidance for engineering teams

• $90.00 - $120.00 USD per hour
• Base compensation will be determined based on a variety of factors including skills, education, certifications, and overall experience for this role.

Inclusivity without exception | At Mindgrub we value and encourage mutual respect and acceptance. We know we all have something to contribute. We work every day to ensure all are welcome, and that we treat all people with fairness and dignity.

No phone calls or recruiters, please.

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Mindgrub’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

The following…