Senior Android Engineer – Identity & Access Management

This is a fully remote position, open to applicants in Colorado, +6 more states.

📋 Description

• Take ownership of onX’s Android identity, subscription, and feature-access libraries utilized across all onX Android applications.

• Define technical direction, enhance patterns, co-manage backend API agreements, and implement changes in production.

• Strengthen token refresh and session lifecycle through the use of coroutines and structured concurrency.

• Manage network interruptions and process terminations effectively to preserve user sessions.

• Create client-side observability for identity workflows and troubleshoot authentication challenges based on device, OS version, and application.

• Represent the Android team in Identity and Access Management (IAM) design efforts related to account management, session management, passkeys, one-time passwords, entitlements, and bundling.

• Collaborate with backend developers, Android platform leaders, product teams, and an iOS counterpart.

• Ensure consistent identity and entitlement functionality through shared specifications, testing cases, and design documentation.

• Enhance client knowledge through code reviews, documentation, and mentorship.

• Identify technical challenges, draft design documents, align stakeholders, and lead rollouts across applications.

• Incorporate and optimize AI experimentation into everyday processes.

• Participate in the Identity team’s on-call schedule, adhering to runbooks or escalating issues when necessary.

• Report to a Software Engineering Manager III.

⛳️ Requirements

• A Bachelor’s degree in Computer Science or a related discipline, or equivalent professional experience.

• At least six years of professional software development experience, primarily focusing on building and deploying production Android applications in Kotlin for a minimum of three years.

• Extensive knowledge of Kotlin, coroutines, and Flow.

• Proven experience in identifying race conditions, lifecycle, and threading issues within production applications.

• Experience in developing and maintaining a shared library or SDK utilized by multiple applications or teams.

• Familiarity with OAuth 2.0 / OpenID Connect standards.

• Experience in secure token storage utilizing the Android Keystore.

• Knowledge of Custom Tabs or AppAuth.

• Proven track record in managing sessions across process terminations and backgrounding.

• A security-first mindset prioritizing secure defaults, token management, and handling failure scenarios.

• Capability to act as the primary expert for client identity and entitlements.

• Experience leading cross-team technical projects from conceptualization to implementation.

• A strong interest in exploring new technologies, particularly in AI.

• Ability to embody and demonstrate onX’s Company Values.

• Permanent authorization to work in the US is a prerequisite for employment.

• Willingness to travel bi-annually for several days to a corporate office or other strategic onX locations.

• Preferred/bonus: Familiarity with Ory, Auth0, Okta, passkeys, Credential Manager API, Sentry, custom metrics, tracing, Google Play Billing, in-app subscriptions, entitlement checks, offline-first applications, distributed teams, or outdoor applications.

🏝️ Benefits

• Competitive salaries.

• Annual bonuses.

• Common share options with a vesting schedule.

• Opportunities for career growth.

• Comprehensive health benefits, including a no-cost medical plan.

• Paid parental leave of 13 weeks for birthing parents and 5 weeks for non-birthing parents.

• 401k matching at 100% for the first 3% you save and 50% for 3-5% saved.

• Company-wide outdoor adventures and fantastic perks from the outdoor industry.

• Annual “Get Out, Get Active” funds to support your active lifestyle.

• Flexible time-off package that encompasses PTO, STO, VTO, and paid holidays.

• Regional basecamps and regular opportunities for in-person collaboration and connection.