MDM Backend Developer

Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit https://www.bitdefender.com We are seeking a Backend MDM Engineer to design and scale our next-generation Mobile Device Management (MDM) infrastructure. In this role, you will be responsible for the core server-side services that enroll, configure, secure, and monitor enterprise Android and iOS/macOS fleets. Your primary focus will involve engineering dual-track MDM management pipelines: leveraging Google's Android Management API (AMAPI) for Android Enterprise devices, and architecting an Apple MDM pipeline powered by NanoMDM for iOS/macOS devices. You will work with security protocols, device enrollment flows (Zero-touch, Knox Mobile Enrollment, Apple Automated Device Enrollment / DEP), Public Key Infrastructure (PKI), and high-throughput real-time command dispatching. Key Responsibilities Android Management (AMAPI) Architect and maintain server-side integrations with Android Management API (AMAPI) to provision policies, applications, network profiles, and compliance rules.Handle Google Cloud Pub/Sub webhooks to ingest real-time device states, enrollment notifications, non-compliance alerts, and command delivery acknowledgments.Implement zero-touch enrollment and QR-code-based provisioning workflows for dedicated, corporate-owned, and work-profile deployment scenarios. Apple Management (NanoMDM / Apple MDM Protocol) Deploy, scale, and integrate NanoMDM as our core Apple MDM protocol gateway.Maintain Apple Push Notification service (APNs) integration for low-latency command queueing and delivery to Apple devices.Handle Apple MDM command sequences (e.g., install profiles, device wipe, query device information, manage restrictions, install enterprise apps).Integrate Apple Automated Device Enrollment (ADE / DEP) and Volume Purchase Program (VPP) via Apple Business Manager / Apple School Manager APIs.Prepare the platform for Apple's Declarative Device Management (DDM) migration. Core Backend & Infrastructure Design, implement, and maintain scalable APIs using Node.js (TypeScript) with strong concurrency patterns, clean service layers, and schema validation.Build and manage PKI and certificate infrastructure: SCEP (Simple Certificate Enrollment Protocol), EST, and mTLS certificate verification for device authentication.Design robust PostgreSQL schemas for device inventory, historical telemetry, policy diffing, and audit logging.Monitor backend availability, APNs throughput, Pub/Sub message queues, and error rates using tools like Prometheus, Grafana, and OpenTelemetry. Qualifications & Skills Must-Have Requirements Professional Experience: 3+ years of production experience in backend software engineering with Node.js (preferably with TypeScript). MDM Domain Expertise Demonstrated experience working with Android Management API (AMAPI) or Android Enterprise SDKs.Practical understanding of the Apple MDM Protocol (Check-in, Command-and-Report cycle, APNs push mechanics, and Configuration Profiles). Security & PKI Strong working knowledge of TLS, mTLS, SCEP/EST protocols, and X.509 certificate lifecycles (issuance, renewal, and revocation). Data & Messaging Proficiency in relational database design (PostgreSQL) and caching/queueing systems (Redis, RabbitMQ, Kafka, or Google Cloud Pub/Sub).API Design & Cloud Infrastructure:Experience with Docker, Kubernetes, and cloud platforms (GCP or AWS).Familiarity with consuming high-throughput webhook streams and implementing idempotent processing. Preferred Qualifications Working knowledge or willingness to learn Go (Golang) to debug, customize, or contribute directly to the NanoMDM open-source engine.Hands-on experience with Apple Automated Device Enrollment (ADE/DEP) and Apps and Books (VPP) API handshakes.Experience with Apple Declarative Device Management (DDM) state-channel updates.Knowledge of Knox Mobile Enrollment (KME) and Android custom DPC extensions.