Mobile DevOps Engineer, Release & Observability

This is a fully remote position, open to applicants in India.

📋 Description

• Develop CI/CD Pipelines: Utilize GitHub Actions or GitLab CI with reusable workflows; Codemagic or Bitrise; Fastlane for signing and store delivery for iOS/Android; MSIX packaging and signing for Windows.

• Own the Release Lifecycle: Manage TestFlight, Play Internal/Closed, Microsoft Store/direct MSIX, staged rollouts, mandatory-update paths, and crash-driven rollback.

• Oversee Signing Keys & Secrets: Handle App Store Connect, Play Console, and EV code-signing certificates for Windows; ensure secret hygiene with 1Password Secrets Automation, GitHub OIDC, or similar tools.

• Establish Production Observability: Implement Sentry/Crashlytics, OpenTelemetry export, and custom metrics for offline behavior; maintain log-redaction discipline for sensitive customer information.

• Create Sideload/MDM Channel: Develop air-gapped distribution paths for utility and regulated customers, including workflows for Intune/Workspace ONE.

• Manage Supply-Chain Hygiene: Generate SBOM (CycloneDX), perform dependency pinning, conduct license scanning, and execute basic Dart/Flutter security reviews.

• Operate Infrastructure: Maintain CI agents, artifact storage, and symbolication services within a modest Azure or AWS footprint.

• Lead the Release Pager: Anchor on-call rotation for release and observability incidents, facilitate postmortems, and turn each incident into opportunities for pipeline enhancement.

⛳️ Requirements

• Mobile Release Engineering: Successfully shipped at least one product across iOS, Android, and ideally Windows at scale.

• CI/CD for Flutter: Proficient with GitHub Actions or GitLab CI reusable workflows, along with Fastlane, Codemagic, or Bitrise.

• Code-Signing Proficiency: Experience with App Store Connect, Play Console, and EV certificates for Windows while ensuring effective secret management.

• Production Observability: Knowledge of setting up Sentry/Crashlytics, OpenTelemetry export, custom metrics, and symbolication.

• Update Strategy Expertise: Experience with staged rollouts, mandatory updates, and optional sideload channels, understanding the associated trade-offs.

• Supply-Chain Hygiene: Regularly apply SBOMs, dependency pinning, and license scanning as integral practices rather than afterthoughts.

• Operational Ownership: Expect to take responsibility for both pipeline and production behavior of deployed software.

• Incident Management: Ability to communicate clearly during incidents and treat postmortems as valuable learning opportunities.

• Preferred (but not mandatory): Previous experience with air-gapped or regulated customer distribution (utility, military, healthcare).

• Familiarity with Microsoft Intune or Workspace ONE workflows.

• Background in SRE/DevOps prior to transitioning into mobile release engineering.

• Experience with 1Password Secrets Automation, HashiCorp Vault, or similar secret-management solutions.

• Proficiency in Renovate/Dependabot for large-scale housekeeping.

• Knowledge of test-driven development for pipeline-as-code and infrastructure modules.

• Experience with small-footprint cloud infrastructure (preferably Azure, but AWS is also acceptable).

🏝️ Benefits

• Real Release Challenges: Engage with three platforms, four channels, and sensitive customer segments.

• Autonomy: Take ownership of the pipeline as a product with a team that values "automation-first."

• Commitment to Observability: A dedicated telemetry budget is established from day one.

• Culture of Continuous Delivery: Avoid quarterly mega-releases; embrace a flow of small changes continuously.

• Fully Remote: Embrace asynchronous work with opportunities for in-person collaboration during release-day reviews.