Methods and apparatuses are described for secure authentication and network access management for mobile computing devices. A server establishes a communications session with a mobile device. The server receives a network access request from the mobile device, the network access request including user access class data based upon authentication credentials provided by a user. The server determines a level of network access to provide to the mobile device based upon the user access class data. The server generates network configurations based upon the determined level of network access. The server applies the network configurations to the communications session with the mobile device. The server transmits an acknowledgment of the network access request to the mobile device. The mobile device routes network traffic originating from the mobile device to external network devices according to the applied network configurations.