Senior Android Engineer - Identity & Access Management

onX • Missoula, MT

6d • Remote

About The Position

onX is seeking a Senior Android Engineer for its Identity & Access Management (IAM) team. The role owns shared Kotlin libraries for identity, subscriptions, and feature access used across all onX Android apps, as well as work supporting sign-ups and entitlements. The engineer will help provide secure, reliable access to onX Hunt, Offroad, Fish, and Backcountry, including in areas with unreliable connectivity. The position reports to a Software Engineering Manager III and involves setting technical direction, collaborating across teams, and advancing initiatives as priorities evolve.

The engineer will work on authentication and session reliability, client-side observability, and consistent identity and entitlement behavior across Android and iOS. They will contribute to IAM design, collaborate with backend engineers and product teams, and drive technical initiatives from design through rollout. The role also includes mentoring and documentation, thoughtful use of AI in workflows, and participation in the Identity team’s on-call rotation. This is a distributed role for candidates located in U.S. states where onX can employ team members, with a preference for people near an office or Basecamp. Occasional travel twice a year for multiple days to a corporate office or other strategic location is required.

Requirements

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.
• At least six years of professional software development experience, including at least three years primarily building and shipping production Android apps in Kotlin.
• Deep knowledge of Kotlin, coroutines, and Flow, with experience diagnosing race conditions, lifecycle issues, and threading issues in production apps.
• Experience building and maintaining a shared library or SDK used by multiple apps or teams, including Gradle modules, versioning, and API design for other engineers.
• Working knowledge of mobile authentication, including OAuth 2.0 or OpenID Connect, secure token storage with Android Keystore, Custom Tabs or AppAuth, and session handling across process death and backgrounding.
• A security-first approach that considers secure defaults, token handling, and failure modes during design.
• Ability to serve as a client identity and entitlements expert, weigh tradeoffs, explain them to engineers outside Android, and advocate for effective approaches.
• Experience driving cross-team technical initiatives from design document through rollout.
• Curiosity about exploring new technologies, including AI.
• Passion for and ability to demonstrate onX’s Company Values.
• Permanent U.S. work authorization.
• Ability to travel twice a year for multiple days to an onX corporate office or strategic location.

Nice To Haves

• Experience with identity platforms such as Ory (Kratos, Hydra), Auth0, or Okta, or with passkeys and the Credential Manager API.
• Experience instrumenting Android apps with Sentry or similar tools, including custom metrics and tracing.
• Experience with Google Play Billing, in-app subscriptions, or entitlement checks.
• Experience building offline-first apps or apps used where connectivity is unreliable.
• Experience working with a distributed team.
• A love of the outdoors and the apps that help people get there.

Responsibilities

• Own the shared Android identity, subscription, and feature-access Kotlin libraries used by onX Android apps, setting technical direction and delivering changes to production.
• Co-own API contracts with backend teams and advocate for changes when needed.
• Improve authentication reliability by hardening token refresh and session lifecycle handling, using coroutines and structured concurrency appropriately, and handling network loss and process death gracefully.
• Build client-side observability for identity flows and use the resulting data to identify and resolve issues.
• Represent Android in IAM design work and represent IAM in the Android codebase, collaborating with backend engineers, Android platform leads, and product teams.
• Partner with the iOS counterpart on shared specifications, test cases, and design documents to maintain consistent identity and entitlement behavior.
• Raise client engineering expertise through code reviews, documentation, and mentoring, including mentoring backend engineers contributing to client code.
• Identify and lead technical initiatives, write design documents, align stakeholders, and drive rollout across apps.
• Explore and incorporate AI into repeatable daily workflows, validating its use with sound judgment.
• Participate in the Identity team’s on-call rotation and follow runbooks or escalate incidents as appropriate.
• Travel twice a year for multiple days to a corporate office or other onX strategic location.

Benefits

• Common share options with a vesting schedule for full-time employees.
• Potential annual bonus of 10% based on company performance.
• Comprehensive health benefits, including a medical plan with no monthly cost.
• Paid parental leave: 13 weeks for birthing parents and 5 weeks for non-birthing parents.
• 401(k) matching: 100% for the first 3% saved and 50% from 3% to 5%.
• Company-wide outdoor adventures and outdoor industry perks.
• Annual “Get Out, Get Active” funds.
• Flexible time-away package including PTO, STO, VTO, and paid holidays.
• Opportunities for growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior