Senior iOS Network Security Architect (contract)

Mindgrub Technologies is a digital agency specializing in digital transformation for established enterprises and growth-stage companies. We build complex, deeply integrated applications that power critical experiences for enterprises and startups alike. Our engineering teams work across web, mobile, and cloud platforms, delivering solutions that range from multi-million dollar platform modernizations to fast-moving, high-impact digital builds.

We are seeking a highly experienced iOS networking specialist for a short-term technical discovery engagement focused on secure network access and browser-based protection on Apple mobile devices.

This is a time-boxed architectural and investigative engagement, not an implementation role. The objective is to evaluate feasibility, define architectural direction, identify risks, and produce clear technical guidance that will inform future product development.

You will assess how an existing enterprise security platform could be extended to iOS while operating within Apple platform constraints and enterprise device management models.

• Lead a deep technical discovery of iOS networking capabilities related to secure traffic routing, enterprise access, and managed application controls
• Evaluate the use of Apple NetworkExtension frameworks, including Packet Tunnel Provider, for implementing a custom VPN based traffic steering solution
• Assess feasibility of per app VPN models tied to managed browser applications such as enterprise managed Chrome or Edge, or a custom secure browser
• Define how authentication state can dynamically control access to internal enterprise resources while maintaining baseline internet protection
• Analyze mobile device management requirements, including supervised device considerations, configuration deployment, and policy enforcement
• Document architectural options, tradeoffs, and constraints imposed by Apple platform policies and APIs
• Identify integration points with existing security infrastructure, including certificate handling, identity flows, and remote configuration
• Define emergency control and fail safe behaviors appropriate for enterprise security environments
• Produce a clear set of technical findings, risks, and recommended architecture to guide downstream product development

• Deep expertise with iOS networking and Apple NetworkExtension framework, especially NEPacketTunnelProvider
• Proven experience designing or implementing VPN or secure network routing solutions on iOS
• Strong understanding of per app VPN, managed app configuration, and mobile device management frameworks
• Experience integrating authentication and identity systems with mobile networking behavior
• Familiarity with enterprise security concepts such as zero trust access, secure web gateways, or secure access service edge models
• Ability to translate complex platform constraints into clear architectural guidance
• Experience producing technical discovery reports, architecture documents, and feasibility assessments

• Background in secure browser technologies or enterprise mobility security
• Experience working with OpenVPN or other VPN protocol integrations within mobile platforms
• Familiarity with Apple enterprise deployment programs and app extension distribution models

• Platform capability assessment and constraints summary
• Recommended high level architecture for iOS
• Key technical risks and mitigation strategies
• Decision framework for browser strategy, VPN model, and device management dependencies
• Implementation readiness guidance for engineering teams

• $90.00 - $120.00 USD per hour
• Base compensation will be determined based on a variety of factors including skills, education, certifications, and overall experience for this role.

Inclusivity without exception | At Mindgrub we value and encourage mutual respect and acceptance. We know we all have something to contribute. We work every day to ensure all are welcome, and that we treat all people with fairness and dignity.

No phone calls or recruiters, please.

#LI-Remote