Apple MDM / iPhone Management Expert
We’re looking for someone experienced with Apple MDM and company-managed iPhones.
We already have our networking architecture in place. Now we need someone to help us properly manage the iPhones our remote employees use.
This will be an hourly contract. The first step is to validate that what we want is technically possible. If it is, we’ll move straight into implementation.
What we want
We have company-owned work iPhones used by remote employees.
We want them to be as locked down as reasonably possible while still being easy for employees to use.
The goal is to prevent accidental mistakes, not make the phones difficult to use.
Requirements
We’d like to know if it’s possible to:
Prevent users from disabling the VPN.
Prevent users from turning off Airplane Mode (if possible).
Prevent users from changing critical network settings.
Prevent users from removing the VPN configuration.
Prevent users from installing or removing apps.
Force all internet traffic through Tailscale.
If the VPN is disconnected or unavailable, the phone should have no internet connection at all (no fallback to local Wi-Fi or cellular).
Remotely manage all company phones.
Make onboarding new phones simple and repeatable.
If any of the above isn’t possible, we’d like to know the closest practical alternative.
Current setup
Company-owned iPhones
Remote employees
Existing Tailscale deployment
Existing networking infrastructure
If it’s possible
We’ll hire you to:
Set up Apple Business Manager (if required)
Configure the MDM
Enroll our first devices
Deploy Tailscale
Configure all required restrictions and policies
Test everything
Document the setup so we can easily add new phones in the future
Please answer when applying
Which Apple MDM platform would you recommend for this project, and why?
Have you managed company-owned iPhones before?
Have you deployed Tailscale through Apple MDM?
Looking at our requirements, do you believe they’re fully achievable, partially achievable, or not achievable? Please briefly explain.
Approximately how many hours do you think the initial implementation will take?