Senior iOS Engineer – Identity & Access Management

This is a fully remote position, open to applicants in Colorado, +6 more states.

📋 Description

• Take ownership of onX’s iOS identity, subscription, and feature-access libraries utilized by all onX iOS applications.

• Define the technical direction, assess patterns, and implement library modifications in production.

• Collaborate on API contracts with backend teams and advocate for necessary adjustments.

• Enhance the reliability of token refresh and session lifecycle.

• Spearhead the adoption of Swift strict concurrency and manage network loss effectively.

• Develop client-side observability for identity flows based on device, OS version, and app.

• Represent iOS in IAM design initiatives related to account management, sessions, passkeys, one-time passwords, entitlements, and bundling.

• Partner with backend engineers, iOS platform leads, product teams, and an Android counterpart.

• Ensure consistent identity and entitlement behavior through shared specifications, tests, and design documentation.

• Elevate client expertise through code reviews, documentation, and mentoring.

• Identify challenges, draft design documents, align stakeholders, and oversee rollouts across applications.

• Investigate the integration of responsible AI into daily operations.

• Participate in the Identity team on-call rotation, adhering to runbooks or escalating issues as necessary.

• Report directly to a Software Engineering Manager III.

⛳️ Requirements

• Bachelor’s degree in Computer Science or a related discipline, or equivalent experience.

• Six or more years of professional experience in software development.

• At least three years of experience in building and launching production iOS applications in Swift as a primary focus.

• Extensive knowledge of Swift and Swift Concurrency, including async/await, actors, and Sendable.

• Proven experience in diagnosing race conditions and threading issues in production applications.

• Experience in creating and maintaining shared libraries or SDKs utilized by multiple applications or teams.

• Proficiency with Swift Package Manager, versioning, and API design for other engineers.

• Familiarity with OAuth 2.0 / OpenID Connect.

• Understanding of token storage in the Keychain.

• Knowledge of ASWebAuthenticationSession and session management across app launches and backgrounding.

• Security-first mindset towards secure defaults, token management, and failure modes.

• Experience leading cross-team technical initiatives from design documentation to implementation.

• Eagerness to explore new technologies, including AI.

• Ability to exemplify onX’s Company Values.

• Permanent US work authorization is a prerequisite for employment.

• Willingness to travel bi-annually for several days to a corporate office or other strategic onX locations.

• Preferred: Familiarity with Ory, Auth0, Okta, passkeys/WebAuthn, Sentry or similar tools, StoreKit, in-app subscriptions, entitlement checks, offline-first applications, distributed teams, or outdoor applications.

🏝️ Benefits

• Competitive salaries.

• Annual bonuses.

• Equity/common share options.

• Opportunities for professional growth.

• Comprehensive health benefits, including a no-monthly-cost medical plan.

• Paid parental leave of 13 weeks for birthing parents and 5 weeks for non-birthing parents.

• 401k matching at 100% for the first 3% you contribute and 50% on contributions from 3-5%.

• Company-wide outdoor adventures and exceptional outdoor industry perks.

• Annual “Get Out, Get Active” funds.

• Flexible time-off package that includes PTO, STO, VTO, and paid holidays.

• Reasonable accommodations for individuals with diverse abilities.

• Distributed work environment featuring regional Basecamps and opportunities for local connection and collaboration.