Senior Mobile Application Developer

SecureAuth is on a mission to eliminate passwords and revolutionize how people authenticate. We are looking for a Senior Mobile Application Developer to lead the implementation of advanced authentication flows - especially passkeys (WebAuthn/FIDO2) - in our cross-platform mobile app, SecureAuth Authenticate. In this role, you will build seamless, secure login experiences that leverage the latest passwordless technologies on both iOS and Android. If you are passionate about cutting-edge mobile development and creating user-friendly security solutions, this is an opportunity to make a significant impact on next-generation identity management.

**Key Responsibilities**:

- ** Develop & Maintain Mobile Apps**:Build, enhance, and maintain native iOS and Android codebases for SecureAuth’s mobile authentication app, ensuring high performance, security, and reliability
- ** Implement Passkey Support**:Integrate passkey authentication (WebAuthn/FIDO2) into the app by developing platform-specific components - including an iOS Credential Provider Extension and an Android CredentialProviderService - to interface with each OS’s passwordless authentication framework
- ** Hardware-Key Integration**:Work extensively with hardware-backed key storage (Apple Secure Enclave and Android StrongBox/Keystore). Implement generation and secure storage of cryptographic keys, and use biometric prompts (Face ID, Touch ID, Android Biometric Authentication) to unlock credentials when needed
- ** Cryptographic Workflows**: Design and code robust cryptographic key management and signing flows. Ensure secure registration, authentication, and key synchronization via SecureAuth’s cloud APIs so that users’ passkeys and credentials seamlessly sync across devices
- ** Enhance Auth Flows**: Extend existing authentication methods (such as QR code enrollment and push notification login) to incorporate passkey-based login. For example, enable users to scan a QR code and confirm login using a passkey, or approve a push notification with a biometric-unlocked passkey instead of a password
- ** Code Quality & Testing**:Write clean, testable, and well-documented code. Establish unit tests and work with QA to automate testing of security features. Perform code reviews to uphold best practices for secure coding and maintainability in an enterprise mobile app
- ** Collaboration**:Work closely with cross-functional teams - including UX/UI designers, product managers, and backend cloud engineers - to plan new features and ensure the mobile app integrates smoothly with SecureAuth’s platform. Participate in agile ceremonies, provide technical guidance on mobile best practices, and coordinate simultaneous feature releases on iOS and Android for parity
- ** Stay Current**:Keep up-to-date with the latest mobile OS capabilities, security standards, and authentication technologies. Proactively recommend and implement improvements so that SecureAuth Authenticate remains at the forefront of user-friendly security (e.g. new iOS/Android biometric APIs, emerging FIDO2 standards, etc.)

**Required Qualifications**:

- ** iOS Expertise**:Deep knowledge of iOS development, including Objective-C++ and Objective-C (for low-level or legacy integrations), as well as Swift and SwiftUI for modern UI development. Comfortable working with iOS frameworks and extensions (e.g. implementing an AutoFill Credential Provider Extension for passkeys on iOS)
- ** Android Expertise**:Strong proficiency in Android development using Kotlin. Experience with modern Android libraries and patterns such as Jetpack Compose for UI and AndroidX libraries. Ability to build Android services and components (e.g. an Android CredentialProviderService for the Android 14+ Credential Manager API) and handle different Android OS versions
- ** Authentication & Security**: Hands-on experience with device security features - including using the Secure Enclave on iOS and Android Keystore/StrongBox - for key generation and storage. Familiarity with biometric authentication flows (fingerprint, face recognition prompts) and ensuring sensitive data is handled securely
- ** WebAuthn/FIDO2 Knowledge**: Working understanding of WebAuthn, FIDO2, or similar cryptographic authentication protocols. You know how public/private key authentication works and have implemented or used cryptographic signing workflows (even if not in production, you grasp the concepts deeply)
- ** CI/CD & Deployment**:Comfortable with mobile CI/CD pipelines and app distribution processes. For example, configuring automated builds, tests, and deployments to the App Store and Google Play. Knowledge of managing provisioning profiles, certificates, signing, and Play Console release tracks
- ** API Integration**:Solid understanding of RESTful API integration and network security in mobile apps. While this role is mobile-focused, you should be adept at working with backend services (authentication APIs, cloud sync endpoints) and handling data serialization