Senior Application Security Architect

Job Posting:
Lead Mobile Developer (React Native & Decentralized Identity)

Work Schedule:

5 days onsite (Monday to Friday)

Hours:

Standard business hours, 8:00 AM – 5:00 PM

Location:

Downtown Toronto, ON

• 5+ years of dedicated, hands‑on experience with React Native and Type Script.
• 4+ years of experience operating in a hands‑on Lead Developer capacity.
• Strong Team Management & Leadership:
  Proven track record of organizing engineering teams, managing task delegation, and successfully collaborating with cross‑functional enterprise stakeholders.

We are seeking a highly skilled, security-focused Lead Mobile Developer to guide the design, architecture, and engineering of our next‑generation mobile applications. In this role, you will bridge the gap between high‑level architectural strategy and hands‑on execution.

You will lead an Agile engineering team building enterprise‑grade, high‑performance iOS and Android applications. A heavy focus of this role involves spearheading our cutting‑edge digital credential wallets and mobile identity solutions. If you are a technical leader passionate about secure coding practices, decentralized identity, and mentoring developers, we want to hear from you.

• Lead Agile Teams:
  Facilitate sprint planning, backlog refinement, technical design sessions, and comprehensive code reviews.
• Stakeholder
  
  Collaboration:
  
  Partner closely with product managers, UX designers, cybersecurity teams, and platform architects to align mobile engineering deliverables with enterprise roadmaps.
• Mentorship:
  Cultivate a strong engineering culture emphasizing user‑centered design, digital accessibility, performance, and secure engineering practices.

• End-to-End Delivery:
  Lead the design, development, and deployment of secure, enterprise‑grade iOS and Android apps using hybrid (React Native, Type Script) and native (Swift, Objective‑C, Java) technologies.
• Device Feature Optimization:
  Guide the team in building high‑performance, multithreaded applications that leverage device hardware (camera, Bluetooth, sensors, local storage).
• UI/UX Implementation:
  Oversee scalable layout implementations across multiple form factors, localizations, and OS‑specific design patterns.
• App Store Management:
  Support the publication, provisioning, and lifecycle management of applications in the Apple App Store and Google Play Store.

• Digital Identity Leadership:
  Architect and develop digital credential wallets and mobile identity solutions utilizing W3C Verifiable Credential data models, Decentralized Identifiers, mDOC, and decentralized identity frameworks.
• Advanced Cryptography:
  Provide deep technical expertise on credential exchange, cryptographic protocols, and security standards (including OIDC, OAuth2, JWT/JWS, CBOR/COSE, ECDSA P-256, Ed25519, TLS, PKI, PCTF, ODIF, IETF, NIST, and eIDAS).
• Hardware Security:
  Oversee integrations with secure OS modules, including Apple’s Secure Enclave and Android's TEE / Strongbox.
• Wallet Ecosystems:
  Implement integrations with Apple and Google wallets, or custom digital wallets (e.g., adding passes/credentials to a wallet and developing mobile verifier applications).
• Vulnerability Mitigation:
  Apply strict OS‑level security guidelines and secure coding practices; lead ongoing patching, code quality standards, and automated testing to eliminate software vulnerabilities.

• Backend Integration:
  Oversee secure mobile integrations with backend systems using REST, SOAP, event‑driven architectures, and cloud‑native systems (Docker, Kubernetes).
• Documentation:
  Ensure comprehensive documentation of all codebases, architectural designs, security processes, and system configurations to maintain long‑term maintainability.

• Solid proficiency in hybrid development alongside native ecosystems (Swift, Objective‑C, Java).
• Hands‑on experience with containerization and orchestration tools (Docker, Kubernetes).
• Deep understanding of API structures and message patterns (REST, SOAP, event‑driven systems).
• Experience implementing automated testing paradigms and maintaining strict CI/CD code quality gates.