Mobile DevOps, Release & Observability Engineer
Synmatch AI
IndiaremotePosted 1 month ago
Skill Required
Mobile-DevOpsRelease-EngineeringCI-CD-EngineeringMobile-Release-EngineeringObservability-EngineeringDevOps-EngineerMobile-DevOps-EngineerMobile-DevSecOps-EngineerMobile-Software-Engineer-(IOS-Android)Mobile-Software-EngineerMobile-Platform-EngineerDevOps EngineerObservabilityDevOpsSOCVaultGitHub ActionsCD pipelinesEngineeringautomationsecurityFlutterAndroidGitAzureCI/CDCloudiOSAWSandCICDAIFulltime
Key highlights
- Fully remote work with async‑first defaults.
- Must have shipped a product across iOS, Android, and ideally Windows.
- Hands‑on experience with CI/CD pipelines for Flutter (GitHub Actions/GitLab CI, Fastlane, Codemagic/Bitrise).
- Responsible for end‑to‑end release lifecycle across Windows, iOS, Android, including store and sideload channels.
- Must manage code‑signing and secret hygiene (App Store Connect, Play Console, EV certificates).
- Opportunity to own production observability using Sentry, OpenTelemetry, and custom metrics.
Role overview
Join Synmatch AI's client on the founding engineering team to lead release and observability for next‑generation power‑quality analysis software. The role owns the end‑to‑end shipping pipeline across three platforms and four distribution channels, ensuring predictable, frequent releases and full visibility into app behavior after CI.
Responsibilities
- Own all pipelines, signing keys, secret hygiene, staged rollouts, and crash‑driven rollback paths for Windows MSIX, iOS App Store/TestFlight, Android Play Store internal/closed tracks, and air‑gapped sideload/MDM channels.
- Build CI/CD pipelines using GitHub Actions or GitLab CI reusable workflows, Codemagic or Bitrise, Fastlane for iOS/Android signing and store delivery, and MSIX packaging and signing for Windows.
- Own the release lifecycle including TestFlight, Play internal/closed tracks, Microsoft Store/direct MSIX, staged rollouts, mandatory‑update paths, and crash‑driven rollback.
- Manage signing keys and secrets across App Store Connect, Play Console, and EV code‑signing certificates for Windows, employing secret hygiene via 1Password Secrets Automation, GitHub OIDC, or equivalent.
- Stand up production observability with Sentry/Crashlytics, OpenTelemetry export, custom metrics for offline‑mode behavior, and log‑redaction discipline for customer data, plus symbolication and dashboards for actionable bug reports.
- Build and maintain the sideload/MDM distribution channel for utility and regulated customers, including Intune and Workspace ONE workflows.
- Manage supply‑chain hygiene by generating SBOMs (CycloneDX), enforcing dependency pinning, performing license scanning, and conducting basic Dart/Flutter security reviews.
- Run infrastructure such as CI agents, artifact storage, and symbolication services on a modest Azure or AWS footprint.
- Carry the release pager: participate in on‑call rotation for release and observability incidents, lead postmortems, and translate findings into pipeline improvements.
- Provide operational ownership of both the pipeline and production behavior of shipped software.
- Communicate clearly during incidents and treat postmortems as products to be iterated upon.
Requirements
- Mobile Release Engineering experience: shipped at least one product across iOS, Android, and ideally Windows at scale.
- Hands‑on CI/CD for Flutter: experience with GitHub Actions or GitLab CI reusable workflows, Fastlane, and Codemagic or Bitrise.
- Code‑signing fluency: App Store Connect, Play Console, and EV code‑signing certificates for Windows with a clean secret‑management story.
- Production observability expertise: setup of Sentry/Crashlytics, OpenTelemetry export, custom metrics, and symbolication experience.
- Update strategy thinking: lived experience with staged rollouts, mandatory updates, and optional sideload channels.
- Supply‑chain hygiene habits: SBOM generation, dependency pinning, and license scanning performed as ongoing practices.
- Operational ownership mindset: expected to own both pipeline and production behavior of what ships.
- Incident composure: clear communication during incidents and treating postmortems as products.
Nice to have
- Prior experience with air‑gapped or regulated‑customer distribution (utility, military, healthcare).
- Familiarity with Microsoft Intune or Workspace ONE workflows.
- Background in SRE/DevOps before moving into mobile release engineering.
- Experience with 1Password Secrets Automation, HashiCorp Vault, or equivalent secret‑management tools.
- Renovate or Dependabot housekeeping at scale.
- Test‑driven development for pipeline‑as‑code and infrastructure modules.
- Experience with small‑footprint cloud infrastructure (Azure preferred, AWS also fine).
Benefits
- Fully remote role with async‑first defaults and occasional in‑person time for release‑day reviews.
- High degree of autonomy to own the pipeline as a product within an automation‑first team.
- Continuous delivery culture with small, frequent changes instead of quarterly mega‑releases.
- Committed telemetry budget from day one to support observability investments.
Additional details
- Three target platforms, four distribution channels, one team.
- Real release problem: three platforms, four channels, sensitive customer segments to solve for.
- Observability investment: telemetry budget is real and committed from day one.
- Continuous delivery culture: no quarterly mega‑releases; small changes flow continuously.
- Autonomy: own the pipeline as a product with a team that respects "automation‑first" as a value.
- Originally posted on Himalayas.