Hi Grant,
MaaS360 can accomplish both of these asks, but there could be a big caveat depending on your setup.
I'm going to gloss over some facts pretty quickly, but give you some links at the end here that go a little more in depth.
There are essentially two styles of management for Androids - Device Admin (DA) and Android Enterprise (AE). DA has effectively been deprecated on Android 10+, so AE is now the default. If AE is not setup in your portal, you'll need to do that first.
DA managed devices never had direct Play store tie-in and silent app installs for enterprise apps (where you have a copy of the APK app file) were only possible on Samsung devices.
AE makes it possible to silently install both public and private apps. So, good news there.
The less good news is that you will have to migrate from DA to AE. This will require interaction on the devices, there just isn't a way to do that silently. Since you are using kiosk mode, that extends to a full factory reset (if you don't mind not using kiosk, we have an in-app migration).
The other good news is that we can push files to specific destinations on the device, but this is not a feature enabled by default. If you reach out to your account rep/partner rep, they will be able to get that turned on for you after they verify your accounts entitlements.
Here are some resources on Android Enterprise: https://www.securitylearningacademy.com/mod/resource/view.php?id=24744
Here is a webinar on the topic: https://www.youtube.com/watch?v=wFwgM8yFkKo&t=327s
------------------------------
Matt Shaver
System Architect
IBM
mshaver@us.ibm.com------------------------------