Android Software Engineer

Thales CDI (Cyber-Security Products) is hiring a Mobile Engineer (iOS) to build IAM (Identity & Access Management) mobile apps and SDKs. You will help deliver secure, easy-to-integrate authentication experiences where security is non-negotiable.

You will work in a small, high-impact team and use AI responsibly to accelerate delivery—while applying strong engineering judgment and human-led security review in a security-critical environment.

Responsibilities:

• Design, build and validate mobile apps and SDKs; use AI-assisted tooling to accelerate delivery with mandatory human-led security review.

• Implement secure authentication and identity verification flows (protocol-driven); validate designs against platform threat models.

• Own test strategy for SDKs (unit/integration/UI); use AI to expand coverage while rigorously testing security-critical paths.

• Design clean, well-documented SDK APIs with backward compatibility and minimal binary-size impact.

• Improve the SDLC with pragmatic AI adoption (test generation, review support, debugging and release automation).

• Maintain CI/CD (e.g., Jenkins, GitLab CI) with SAST, dependency scanning and automated security checks; use AI to triage and accelerate remediation.

• Evaluate AI/ML tools and recommend adoption aligned to IAM security and data-handling standards; share best practices.

• Add privacy-conscious telemetry (crash/performance/diagnostics) to support customers without exposing sensitive identity data.

• Contribute to product innovation (prototypes/patents), including AI/ML opportunities that improve security and reduce user friction.

Requirements:

• Degree in Computer Engineering, Information Security, Electronics or related field.

• 5+ years of professional mobile development experience.

• iOS (Swift, SwiftUI/UIKit) expertise, including lifecycle, concurrency and memory management.

• AI-assisted development (e.g., Copilot/Claude/Cursor); able to prompt effectively and critically validate/rewrite output for security-sensitive code.

• Ability to apply AI across the SDLC (tests/docs/debug/review) with strong quality and security judgment.

• Experience building and distributing mobile SDKs (API design, versioning, binary distribution, backward compatibility).

• Familiar with mobile security practices/tools: static analysis, secure storage (Keychain/Keystore), certificate pinning and reverse-engineering countermeasures.

• Advantage: IAM and auth protocols (OAuth 2.0, OIDC, FIDO2, certificate-based authentication).

• Self-directed, collaborative engineer with strong trade-off judgment.

Other Information:

• Working Location: One North

• Working Hours: Monday - Friday, 9am - 6pm