Senior iOS Engineer - Identity & Access Management

Location: Remote within the United States; preference for candidates near onX offices or Basecamps. Candidates must reside in a state where onX can employ team members; employment is currently unavailable in Alabama, Alaska, Arkansas, Connecticut, Delaware, District of Columbia, Florida, Hawaii, Illinois, Kansas, Louisiana, Massachusetts, Missouri, New Jersey, New York, North Dakota, Ohio, Oklahoma, Rhode Island, South Dakota, West Virginia, and Wyoming. Permanent US work authorization is required. Ability to travel bi-annually for multiple days to an onX office or strategic location is required.

Salary: $146,000–$182,000 annually, plus potential 10% annual bonus and common share options.

Company

onX builds outdoor technology products for Hunt, Offroad, Backcountry, and Fish, serving millions of outdoor enthusiasts through a distributed organization.

What you will do

• Own shared Swift packages for iOS identity, subscriptions, feature access, authentication, sessions, and entitlements across all onX apps.
• Set technical direction, maintain API contracts with backend teams, and deliver platform changes through production.
• Improve token refresh, session lifecycle, Swift concurrency, and network-loss handling for reliable access in the field.
• Build client-side observability for identity flows by device, OS version, and app.
• Represent iOS in IAM design work covering account management, passkeys, one-time passwords, entitlements, and bundling; coordinate with backend, Android, platform, and product teams.
• Drive design documents, code reviews, mentoring, cross-team rollouts, AI experimentation, and the Identity team on-call rotation.

Requirements

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.
• Six or more years of professional software development experience, including at least three years primarily building and shipping production iOS apps in Swift.
• Deep knowledge of Swift and Swift Concurrency, including async/await, actors, and Sendable, with experience diagnosing production race conditions and threading issues.
• Experience building and maintaining shared libraries or SDKs used by multiple apps or teams, including Swift Package Manager, versioning, and API design for other engineers.
• Working knowledge of mobile authentication: OAuth 2.0, OpenID Connect, Keychain token storage, ASWebAuthenticationSession, and session handling across app launches and backgrounding.
• Security-first design approach covering secure defaults, token handling, and failure modes.
• Ability to act as the client identity and entitlements expert, explain trade-offs outside iOS, and propose or advocate for improved approaches.
• Experience driving cross-team technical initiatives from design document through rollout.
• Ability to demonstrate alignment with onX company values and curiosity about new technologies, including AI.
• Permanent US work authorization is required.
• Bi-annual travel for multiple days to a corporate office or strategic onX location is required.

Nice to have

• Experience with Ory, Auth0, Okta, passkeys, or WebAuthn.
• Experience instrumenting iOS apps with Sentry or similar tools, including custom metrics and tracing.
• Experience with StoreKit, in-app subscriptions, or entitlement checks.
• Experience building offline-first apps or apps used with unreliable connectivity.
• Experience working with a distributed team and interest in outdoor applications.

Culture & Benefits

• Distributed work with physical offices in Bozeman and Missoula and remote Basecamps across the United States.
• Regular in-person collaboration through regional Basecamps and company-wide outdoor adventures.
• Health benefits including a no-monthly-cost medical plan, paid parental leave, and 401(k) matching.
• Competitive compensation, annual bonuses, equity, growth opportunities, outdoor industry perks, and annual activity funds.
• Flexible time away package including PTO, STO, VTO, and paid holidays.

Hiring process

• Position remains open until filled; the listed application deadline contains incomplete date and time placeholders.
• Interview conversations may be recorded for documentation, with an opportunity to opt out where applicable.