Mobile App Developer

About the Project

Panorama Pro is QuickLaunch's Identity & Access Management (IAM) mobile app. This engagement covers a mix of bug fixes on the existing app and new development across login, multi-factor authentication (MFA), account recovery, and account management flows, followed by security hardening and app store publishing.

Core Responsibilities

• Fix existing defects: login performance/slow app-open, cross-device logout, tap-target issues on Forgot Password/Username, first-time-user (FTU) validation bugs, and Android 16KB memory page size compliance (Jira DEV-8420)
• Build Entra ID / Active Directory login support, including group-based login display (passwordless vs. 2FA), AD account notifications (expired/locked/disabled), and brute-force/MFA-attempt notifications
• Implement MFA factor validation and management: Email OTP, Phone OTP, Authenticator (Google/Microsoft/Twilio), Security Questions, Mobile Push, and new Passkey support (Figma to be provided by QuickLaunch)
• Build account activation flows (first-time password creation, with/without email-phone auth) and recovery-page flows (password policy, blacklisted passwords)
• Rework the FTU-without-MFA-configured flow: in-app prompt to configure MFA immediately, then return to login
• Fix duplicate-device display and add device-name differentiation for multi-device registrations
• Maintain Gitlab-based release process; deliver app + deployment documentation; support staging preprod (beta/signoff) production (GA) promotion
• Remediate any VAPT-identified vulnerabilities and secure all open APIs (existing and new)
• Handle App Store / Play Store key & certificate management, and handover publishing access to QuickLaunch's DevOps team
• Need to implement app-based MFA post login based on app policy
• Implement hybrid password less functionality on tenant admin and end user side, based on the policy the user will decide to login through which flow (hybrid-password less or 2FA)

Required Skills

• Strong native iOS (Swift) and/or Android (Kotlin) experience, or equivalent cross-platform (React Native/Flutter) with platform-specific publishing experience
• Hands-on experience with authentication/IAM concepts: OAuth/SAML/OIDC, MFA, SSO, Entra ID/Active Directory integration
• Experience implementing biometric/passkey authentication
• Git/Gitlab workflows and CI/CD across staging, preprod, and prod
• App Store Connect and Google Play Console publishing, including compliance fixes (e.g., 16KB page size)
• Basic API security awareness (able to work with a VAPT report and close findings)
• Comfortable working against a Figma handoff for new screens