Senior Mobile Authentication Integration Engineer (iOS/Android)

Peraton•,

1d•Remote

About The Position

Peraton is seeking a highly experienced Mobile Authentication Integration Engineer to support the Department of Defense's next-generation enterprise Identity, Credential, and Access Management (ICAM) platform that is replacing DS Logon and providing secure authentication services for millions of Service Members, Veterans, Family Members, and Beneficiaries. The Alternative Multi-factor Authentication Support Services (AMASS) Program provides secure, scalable identity and access management services across the Department of Defense, enabling authentication, authorization, and digital identity interoperability for high visibility DoD systems. In this role you will specialize in native mobile identity integration to support a Federal customer’s secure mobility and authentication programs with emphasis on implementing phishing-resistant authentication, enterprise identity workflows, and secure SDK integrations into native iOS and Android applications. This role is oriented toward enterprise identity engineering, not traditional user‑interface or consumer application development. This is a 100% remote role.

Requirements

Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD
Bachelor’s degree in Computer Science, Engineering, or related technical discipline; or equivalent experience
Must be able to obtain and maintain a Public Trust
U.S. Citizenship required
Extensive experience in native iOS development using Swift
Extensive experience in native Android development using Kotlin/Java
Hands-on experience integrating Okta Identity Engine (OIE) Embedded SDKs into native applications
Strong understanding of OAuth 2.0, OIDC, PKCE, and secure token management
Experience implementing FIDO2/WebAuthn, passkeys, and other phishing-resistant authentication methods
Knowledge of mobile identity enrollment, account recovery, and secure credential storage techniques
Experience integrating RESTful APIs and enterprise backend identity services
Familiarity with CAC/PIV, Purebred, and other Federal mobile credentials
Background in mobile security including OWASP Mobile Top 10, certificate pinning, and TLS
Experience with CI/CD systems, automated testing, and mobile release management
Strong troubleshooting skills across authentication flows, SDK integrations, and mobile platforms
Experience supporting enterprise or Federal mobile authentication solutions
Knowledge of NIST SP 800‑63 Digital Identity Guidelines
Understanding of Zero Trust authentication principles
Experience with Agile development and Git-based workflow

Nice To Haves

Experience working directly on Federal identity or cybersecurity programs
Experience integrating third-party authentication SDKs within regulated environments
Knowledge of Federal IAM architectures, identity federation, and enterprise identity platforms
Experience contributing to mobile security documentation, risk assessments, or compliance reviews

Responsibilities

Integrate Okta Identity Engine (OIE) Embedded SDKs into native iOS and Android applications in compliance with Federal identity requirements
Implement OAuth 2.0, OpenID Connect (OIDC), PKCE, token lifecycle management, and secure session handling
Develop secure mobile authentication, identity enrollment, and account recovery workflows aligned with Federal digital identity standards
Implement FIDO2/WebAuthn, passkeys, and other phishing-resistant authentication mechanisms
Integrate CAC/PIV, Purebred, and other government-issued mobile credentials
Manage secure storage of credentials and tokens using iOS Keychain and Android Keystore
Implement device registration, trusted device policies, and mobile biometric authentication (Face ID, Touch ID, Android Biometrics)
Apply mobile application security controls including OWASP Mobile Top 10, certificate pinning, TLS configuration, and secure network communication
Troubleshoot authentication, SDK, API, and mobile platform integration issues
Design mobile enrollment workflows compliant with NIST SP 800-63
Implement secure application routing using Universal Links and Android App Links
Implement proxy user experiences supporting dependent access
Design seamless in-app authentication experiences eliminating browser redirects
Support integration of native mobile applications with enterprise IAM/CIAM systems used across Federal agencies
Ensure compliance with NIST SP 800‑63 Digital Identity Guidelines and Zero Trust authentication principles
Participate in Agile development processes, DevSecOps pipelines, and CI/CD workflows
Collaborate with Federal cybersecurity, identity management, and mobile engineering teams to ensure secure delivery of mobile identity capabilities