Senior Android Engineer – VPN/Networking
Fusemachines
IndiaPosted 1 month ago
Skill Required
IT JobsAndroid DevelopernetworkingAndroidVPNandAIContract
Key highlights
- Remote full‑time position.
- 6‑month contract with possible extension.
- Must have Android/Kotlin experience with VpnService.
- Prior VPN product experience required.
- Experience with WireGuard, OpenVPN, IKEv2/IPsec required.
- NDK/JNI experience strongly preferred.
Role overview
Responsibilities
- Building and managing a VPN tunnel, routing, DNS handling, per‑app VPN, always‑on VPN behaviour.
- Implementing TUN interface concepts: packet capture/forwarding, MTU, TCP/UDP basics as they apply to tunnelling.
- Applying strong networking fundamentals: TCP/UDP, TLS, DNS, HTTP(S), proxies, NAT concepts, latency/packet loss handling.
- Integrating VPN cores using NDK/JNI (C/C++) and building/shipping native libraries for multiple ABIs (arm64‑v8a, armeabi‑v7a).
- Configuring release hardening: R8/Proguard, crash/ANR monitoring, Play Console workflows.
- Using Gradle/CMake for native builds.
- Implementing protocols: WireGuard (keypairs, allowed‑ips, handshake/keepalive), OpenVPN (TLS, config formats, cipher suites, connection stability), IKEv2/IPsec (EAP/TLS or PSK auth options, MOBIKE, NAT‑T) and optionally Shadowsocks/custom tunnelling.
- Ensuring security & privacy: Android Keystore, secure storage, encryption, certificate handling/pinning, threat modelling, least‑privilege design, privacy‑first telemetry.
- Developing core VPN SDK + app shell architecture.
- Complying with Play policy for VPN apps.
- Delivering stable connections across protocols with minimal battery impact and no DNS/IP leaks in standard test suites.
Requirements
- Android development experience.
- Kotlin, coroutines/Flow, modern Android architecture.
- Experience with Android VpnService.
- Understanding of TUN interface concepts, packet capture/forwarding, MTU, TCP/UDP basics.
- Strong networking fundamentals: TCP/UDP, TLS, DNS, HTTP(S), proxies, NAT concepts, latency/packet loss handling.
- Experience building and shipping native libraries for multiple ABIs (arm64‑v8a, armeabi‑v7a).
- Proficiency with Gradle/CMake native builds.
- Hands‑on experience with WireGuard, OpenVPN, IKEv2/IPsec protocols.
- Knowledge of Android Keystore, secure storage, encryption, certificate handling/pinning.
- Experience with threat modelling, least‑privilege design, privacy‑first telemetry.
- Prior VPN product experience (consumer or enterprise).
- Play policy experience for VPN apps.
Nice to have
- NDK/JNI experience (C/C++) for integrating VPN cores (strongly preferred).
- Experience with Shadowsocks / custom tunnelling (optional).
- Backend/DevOps experience: one backend stack (Go/Java/Node/Python) + PostgreSQL (or equivalent).
- Secure API design, secrets management (KMS/Vault), rate limiting.
- Linux networking: iptables/nftables, routing, sysctl tuning.
- Infrastructure-as-code and CI/CD; monitoring (Prometheus/Grafana), centralized logs.
- Automated provisioning pipeline for servers and user/device configs.
- Monitoring dashboards + alerting; documented runbooks.
Benefits
- Remote full‑time position.
- 6‑month contractual job with possibility of extension.
- Equal Opportunities Employer, committed to diversity and inclusion.
Additional details
- Founded in 2013, Fusemachines is a global provider of enterprise AI products and services, on a mission to democratize AI.
- Leveraging proprietary AI Studio and AI Engines, the company helps drive clients’ AI Enterprise Transformation.
- Offices in North America, Asia, and Latin America.
- Serves companies in retail, manufacturing, and government.
- Fusemachines provides high‑quality AI education in underserved communities.
- Originally posted on Himalayas.