Senior Android Engineer (Identity & Access Management)

Location: Remote within the United States; preference for candidates near onX offices or Basecamps. Candidates must reside in a state where onX can employ team members, and permanent US work authorization is required. OnX cannot currently employ workers primarily located in Alabama, Alaska, Arkansas, Connecticut, Delaware, District of Columbia, Florida, Hawaii, Illinois, Kansas, Louisiana, Massachusetts, Missouri, New Jersey, New York, North Dakota, Ohio, Oklahoma, Rhode Island, South Dakota, West Virginia, or Wyoming. Ability to travel bi-annually for multiple days to an onX office or strategic location is required.

Salary: $146,000–$182,000 upon hire, plus potential annual bonus and equity.

Company

onX builds outdoor technology products for hunting, offroading, backcountry recreation, and fishing, serving millions of outdoor enthusiasts.

What you will do

• Own shared Kotlin Android libraries for identity, authentication, subscriptions, entitlements, and feature access across onX apps.
• Set technical direction, maintain API contracts with backend teams, and deliver library changes through production.
• Improve token refresh, session lifecycle, structured concurrency, and resilience to network loss and process death.
• Build observability for identity flows by device, OS version, and app to identify and resolve authentication issues.
• Partner with backend, Android, iOS, and product teams on account management, passkeys, one-time passwords, entitlements, and bundling.
• Lead design documents and rollouts, mentor engineers, contribute to code review and documentation, and participate in the Identity team on-call rotation.

Requirements

• Bachelor’s degree in Computer Science or a related field, or equivalent experience.
• Six or more years of professional software development experience, including at least three years primarily building and shipping production Android apps in Kotlin.
• Deep knowledge of Kotlin, coroutines, and Flow, with experience diagnosing race conditions, lifecycle issues, and threading problems in production apps.
• Experience building and maintaining shared libraries or SDKs used by multiple apps or teams, including Gradle modules, versioning, and API design.
• Working knowledge of OAuth 2.0, OpenID Connect, Android Keystore token storage, Custom Tabs or AppAuth, and session handling across process death and backgrounding.
• Security-first approach to secure defaults, token handling, and failure modes.
• Ability to act as the client identity and entitlements expert, explain trade-offs to non-Android engineers, and propose improved approaches.
• Experience driving cross-team technical initiatives from design documentation through rollout.
• Strong curiosity about new technologies, including AI; ability to demonstrate alignment with onX company values.
• Permanent US work authorization and ability to travel bi-annually for multiple days are required.

Nice to have

• Experience with Ory, Auth0, Okta, passkeys, or the Credential Manager API.
• Experience instrumenting Android apps with Sentry or similar tools, including custom metrics and tracing.
• Experience with Google Play Billing, in-app subscriptions, or entitlement checks.
• Experience building offline-first apps or apps used where connectivity is unreliable.
• Experience working with a distributed team and interest in outdoor recreation.

Culture & Benefits

• Distributed work environment with regular in-person collaboration through offices and regional Basecamps.
• Health benefits including a no-monthly-cost medical plan, paid parental leave, and 401k matching.
• Competitive salary, annual bonus opportunity, equity, and growth opportunities.
• Flexible time away package including PTO, STO, VTO, and paid holidays.
• Company-wide outdoor adventures and outdoor industry perks, including annual activity funds.