关于此职位
Trách nhiệm chính
- Develop backend services including device management APIs, policy engines, and command queues.
- Build web dashboards (Admin Consoles) for MDM administrators.
- Develop mobile agent applications on Android and/or iOS for managed devices.
- Implement MDM features such as remote lock/wipe, kiosk mode, and app blacklisting/whitelisting.
- Contribute to device security flows: enrollment, attestation, key provisioning, and certificate lifecycle under Tech Lead guidance.
- Write unit and integration tests to ensure code coverage meets requirements.
- Participate in code reviews and contribute to architectural and procedural improvements.
- Fix bugs, optimize performance, and resolve technical debt.
- Stay updated with Android Enterprise, Apple MDM protocol, and SCEP/DEP.
Yêu cầu
- Bachelor's degree in IT, Computer Science, Information Security, or equivalent.
- 3–5 years of experience in software development.
- Prior experience in mobile development or device security products is preferred.
- Backend: Golang, Java, Node.js or Python; RESTful API, SQL/NoSQL databases.
- Frontend: React.js or Vue.js, TypeScript, responsive design.
- Mobile: Android (Kotlin/Java) or iOS (Swift); React Native is a plus.
- Cloud: AWS basic (EC2, S3, Lambda), Firebase Cloud Messaging.
- Tools: Git, Docker, CI/CD, Agile/Scrum.
- Working knowledge of on-device security chips/environments.
- Basic understanding of SEP, key generation/storage via Secure Enclave–backed keys, biometric‑bound keys, and Keychain access control.
- Use Android Keystore with StrongBox, understand differences between software, TEE‑backed, and StrongBox‑backed keys; familiarity with Key Attestation.
- Familiarity with PCRs, sealed storage, remote attestation, and EK/AIK; able to learn on the job for desktop agent work.
- Familiarity with HSM / cloud KMS concepts; integration experience (AWS KMS, GCP KMS, Azure Key Vault, or PKCS#11) is a plus.
- Understand Root of Trust, Secure Boot, Verified Boot, and attestation concepts.
- Understand and correctly use common cryptographic algorithms for each problem; designing cryptographic protocols from scratch is not required.
- Use well‑vetted libraries (Tink, libsodium, BoringSSL, BouncyCastle, JCA/JCE, CryptoKit); never roll custom cryptography.
- Able to implement common data protection mechanisms in MDM products following the Tech Lead's design.
- High level of autonomy and proactive problem‑solving.
- Eagerness to learn and stay updated with new technologies.
- Strong collaboration skills and willingness to support teammates.
- Security mindset — ability to think like an attacker.
- English reading comprehension for technical documentation.
Mức lương
- Negotiable based on capability
Phúc lợi
- Full Social, Health, and Unemployment Insurance.
- Other benefits to be discussed during the interview.
Hình thức làm việc
- Monday – Friday, 8:00 AM – 5:00 PM.
Thông tin khác
- Headcount: 4
- Position: Fullstack Developer
- Department: Engineering
- Report to: Tech Lead / Sub Lead
- Level: Middle/ Senior