1. SDK Architecture and Engineering :

- Design, architect, and evolve scalable, secure, and high-performance native Android and iOS SDKs.

- Establish SDK architecture, modularization, public API design, versioning strategies, and backward-compatibility standards.

- Lead the development of reusable SDK components using Kotlin/Java, Android NDK/C++ where required, Swift, and Objective-C.

- Optimize SDK binary size, cold-start latency, memory footprint, initialization overhead, and runtime performance.

- Design integration patterns that minimize implementation effort and compatibility issues for banking and fintech partners.

- Define SDK integration contracts, configuration models, error handling, and developer-facing APIs.

- Develop sample applications, integration documentation, migration guides, and diagnostic tooling.

- Review code and architecture proposals, enforce engineering standards, and mentor junior and mid-level engineers.

2. Advanced Device Security and Anti-Fraud:

- Design and implement robust root/jailbreak detection and identify emulators, debuggers, hooking frameworks, and runtime instrumentation.

- Develop and harden detection mechanisms against tools and techniques such as Frida, Xposed, Cydia Substrate, and related injection frameworks.

- Architect RASP capabilities covering runtime integrity verification, anti-tampering, anti-repackaging, obfuscation, and suspicious execution detection.

- Design privacy-conscious device fingerprinting mechanisms that generate reliable signals for fraud detection and risk assessment.

- Evaluate bypass techniques, perform security-focused testing, and proactively strengthen detection and mitigation mechanisms.

- Balance detection effectiveness with false-positive rates, device compatibility, performance, and legitimate user experience.

- Collaborate with security research, fraud analytics, and machine learning teams to integrate device risk signals into fraud detection systems.

- Define approaches for securely collecting, validating, and transmitting device security telemetry.

3. Android and iOS Platform Security :

- Lead security-focused implementation across Android and iOS, with deep expertise in at least one platform and working knowledge of the other.

- Integrate and evaluate Android Keystore, Play Integrity API, iOS Keychain, Secure Enclave, and App Attest.

- Design secure SDK-to-server communication flows involving token exchange, certificate pinning, replay protection, and appropriate cryptographic controls.

- Implement secure local storage, sensitive-data handling, integrity verification, and platform-specific security controls.

- Evaluate low-level platform capabilities and Android NDK/C++ or native iOS techniques where they improve security.

- Stay current with OS security changes, platform restrictions, new attack vectors, and evolving mobile security best practices.

- Assess security trade-offs and recommend practical mitigations for production environments.

4. Quality Engineering and Production Ownership :

- Define SDK quality standards covering crash-free rate, ANR rate, startup performance, memory usage, compatibility, and release stability.

- Establish comprehensive testing strategies across real devices, OS versions, manufacturers, and application configurations.

- Design automated unit, integration, compatibility, and regression testing for SDK components.

- Build and improve CI/CD pipelines for SDK compilation, security checks, automated testing, artifact publishing, and staged rollouts.

- Lead root-cause analysis of complex production issues, security incidents, and partner integration failures.

- Own release readiness, version rollout strategies, regression prevention, and production stability improvements.

- Establish monitoring, diagnostics, and support processes for L2/L3 partner integration issues.

5. Partner Engineering and Cross-Functional Collaboration :

- Work directly with banking, fintech, and enterprise partners to resolve complex SDK integration and compatibility challenges.

- Lead technical discussions, partner onboarding, integration validation, and certification activities.

- Collaborate with backend engineering teams on secure APIs, authentication flows, telemetry ingestion, and device risk assessment.

- Partner with fraud and ML teams to improve the quality and usefulness of device-derived risk signals.

- Coordinate with security teams on threat modeling, vulnerability assessment, remediation, and security validation.

- Translate partner requirements and production findings into SDK roadmap improvements.

Required Skills and Qualifications :

- 6 - 8 years of hands-on native mobile engineering experience.

- Strong expertise in at least one platform :

1. Android : Kotlin, Java, Android SDK, Gradle, and preferably NDK/C++.

2. iOS : Swift, Objective-C, Xcode, and platform-native security frameworks.

- Proven experience building, releasing, and maintaining production SDKs or libraries consumed by external developers or partner applications.

- Strong understanding of SDK architecture, public API design, semantic versioning, dependency management, and backward compatibility.

- Hands-on experience with mobile security controls, including root/jailbreak detection, anti-tampering, and code obfuscation.

- Practical knowledge of RASP, runtime integrity checks, hooking/injection detection, and anti-repackaging techniques.

- Experience with device fingerprinting or mobile device risk signals.

- Strong understanding of Android Keystore and Play Integrity API, and/or iOS Keychain, Secure Enclave, and App Attest.

- Experience implementing secure communication controls, including certificate pinning, secure token handling, and replay protection.

- Demonstrated ability to debug complex issues across physical devices, manufacturers, and OS versions.

- Experience with CI/CD, automated testing, production diagnostics, and SDK release management.

- Strong technical leadership, code review, problem-solving, and cross-functional communication skills.