Skip to content

Open nowPosted 3 days ago

MDM Developer (nodeJS)

Bitdefender58 open roles

Where
Bucharest
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowMDM Developer (nodeJS)Bitdefender · Bucharest
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Bitdefender's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.7%1 day
  2. 3.5%3 days
  3. 7.8%7 days
  4. 14.6%14 days
  5. 34.1%30 days
This job: posted 3 days ago

The posting

Bitdefender is a cybersecurity leader delivering best-in-class threat prevention, detection, and response solutions worldwide. Guardian over millions of consumer, enterprise, and government environments, Bitdefender is one of the industry’s most trusted experts for eliminating threats, protecting privacy, digital identity and data, and enabling cyber resilience. With deep investments in research and development, Bitdefender Labs discovers hundreds of new threats each minute and validates billions of threat queries daily. The company has pioneered breakthrough innovations in antimalware, IoT security, behavioral analytics, and artificial intelligence and its technology is licensed by more than 180 of the world’s most recognized technology brands. Founded in 2001, Bitdefender has customers in 170+ countries with offices around the world. For more information, visit https://www.bitdefender.com

We are seeking a Backend MDM Engineer to design and scale our next-generation Mobile Device Management (MDM) infrastructure. In this role, you will be responsible for the core server-side services that enroll, configure, secure, and monitor enterprise Android and iOS/macOS fleets.

Your primary focus will involve engineering dual-track MDM management pipelines: leveraging Google's Android Management API (AMAPI) for Android Enterprise devices, and architecting an Apple MDM pipeline powered by NanoMDM for iOS/macOS devices. You will work with security protocols, device enrollment flows (Zero-touch, Knox Mobile Enrollment, Apple Automated Device Enrollment / DEP), Public Key Infrastructure (PKI), and high-throughput real-time command dispatching.

Key Responsibilities

Android Management (AMAPI)

  • Architect and maintain server-side integrations with Android Management API (AMAPI) to provision policies, applications, network profiles, and compliance rules.
  • Handle Google Cloud Pub/Sub webhooks to ingest real-time device states, enrollment notifications, non-compliance alerts, and command delivery acknowledgments.
  • Implement zero-touch enrollment and QR-code-based provisioning workflows for dedicated, corporate-owned, and work-profile deployment scenarios.

Apple Management (NanoMDM / Apple MDM Protocol)

  • Deploy, scale, and integrate NanoMDM as our core Apple MDM protocol gateway.
  • Maintain Apple Push Notification service (APNs) integration for low-latency command queueing and delivery to Apple devices.
  • Handle Apple MDM command sequences (e.g., install profiles, device wipe, query device information, manage restrictions, install enterprise apps).
  • Integrate Apple Automated Device Enrollment (ADE / DEP) and Volume Purchase Program (VPP) via Apple Business Manager / Apple School Manager APIs.
  • Prepare the platform for Apple's Declarative Device Management (DDM) migration.

Core Backend & Infrastructure

  • Design, implement, and maintain scalable APIs using Node.js (TypeScript) with strong concurrency patterns, clean service layers, and schema validation.
  • Build and manage PKI and certificate infrastructure: SCEP (Simple Certificate Enrollment Protocol), EST, and mTLS certificate verification for device authentication.
  • Design robust PostgreSQL schemas for device inventory, historical telemetry, policy diffing, and audit logging.
  • Monitor backend availability, APNs throughput, Pub/Sub message queues, and error rates using tools like Prometheus, Grafana, and OpenTelemetry.

Qualifications & Skills

Must-Have Requirements

  • Professional Experience: 3+ years of production experience in backend software engineering with Node.js (preferably with TypeScript).

MDM Domain Expertise:

  • Demonstrated experience working with Android Management API (AMAPI) or Android Enterprise SDKs.
  • Practical understanding of the Apple MDM Protocol (Check-in, Command-and-Report cycle, APNs push mechanics, and Configuration Profiles).

Security & PKI:

  • Strong working knowledge of TLS, mTLS, SCEP/EST protocols, and X.509 certificate lifecycles (issuance, renewal, and revocation).

Data & Messaging:

  • Proficiency in relational database design (PostgreSQL) and caching/queueing systems (Redis, RabbitMQ, Kafka, or Google Cloud Pub/Sub).
  • API Design & Cloud Infrastructure:
  • Experience with Docker, Kubernetes, and cloud platforms (GCP or AWS).
  • Familiarity with consuming high-throughput webhook streams and implementing idempotent processing.

Preferred Qualifications

  • Working knowledge or willingness to learn Go (Golang) to debug, customize, or contribute directly to the NanoMDM open-source engine.
  • Hands-on experience with Apple Automated Device Enrollment (ADE/DEP) and Apps and Books (VPP) API handshakes.
  • Experience with Apple Declarative Device Management (DDM) state-channel updates.
  • Knowledge of Knox Mobile Enrollment (KME) and Android custom DPC extensions.

#LI-SA1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Bitdefender's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Bitdefender's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Bitdefender's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.