Senior React Native Engineer, iOS and Mobile Security

ETHOS - Talent & Advisory · Washington dc baltimore area, United States

Help build a high impact mobile app that millions of Americans will rely on to access essential government services. You’ll be the senior mobile engineer responsible for making it secure, private, and reliable on the devices people actually carry. This is a hands on role for an iOS first engineer who writes native code, owns security decisions, and builds apps that keep working without a perfect network connection.

What You Will Do

• Build and maintain React Native New Architecture modules (Turbo Modules, JSI, Fabric) in Swift, expanding into Kotlin over time
• Integrate a native SDK that runs its own UI and background work, and keep it reliable through backgrounding, process death, and OS upgrades
• Implement device security using Secure Enclave keys, App Attest, Keychain protection classes, passkeys, and OIDC
• Design local first features with encrypted on device storage, offline behavior, and sync
• Own the app’s backend for frontend (BFF) boundary, including token exchange and upstream API integration
• Keep PII out of logs, crash reports, and analytics, enforced by redaction and tests
• Own iOS and Android builds, signing, CI, and TestFlight and Play releases

Required

• 8+ years in mobile development, including 3+ years of production React Native
• Strong production Swift, with native iOS apps shipped outside of React Native
• Has written native modules for React Native and debugged crashes across the bridge from native stack traces
• Deep iOS security experience: Secure Enclave, App Attest, Keychain, passkeys, OIDC
• Has designed or owned a server side boundary such as a BFF
• Experience building apps that handle sensitive personal data
• Able to obtain a Public Trust

Preferred

• Kotlin and native Android: Keystore, StrongBox, Play Integrity, WorkManager
• Federal experience with NIST 800-63, NIST 800-53, the Privacy Act, or work under an ATO
• Section 508 delivery with VoiceOver and TalkBack tested by hand
• OpenAPI generated clients, mTLS, and certificate pinning
• Performance tuning for low end Android device