Mobile DevOps Engineer

Synmatch AI; India; Remote; INR 2,700,000 - 3,300,000; Full time

Benefits offered by this job

Compensation: up to 30 LPA

Fully Remote

Autonomy in pipeline ownership

Observability budget and tools

Continuous delivery culture

Job summary

Synmatch AI is building the next generation of power-quality software. You will join the founding engineering team as a Mobile DevOps & Release Engineer responsible for CI/CD pipelines across iOS, Android, and Windows, and for secure signing and release channels.

You will own observability, implement signed and staged rollouts, manage signing keys, and enable sideload/MDM distributions for regulated customers, with an async-first, fully remote culture.

Qualifications

• Shipped a mobile product across iOS, Android, and Windows at scale.
• Hands-on with Flutter CI/CD and reusable workflows.
• Experience with app signing and EV certificates for Windows.
• Experience with production observability tools (Sentry/Crashlytics).
• Experience with staged rollouts and update strategies.
• Knowledge of SBOM and license scanning helps.
• Ownership of pipeline and production behavior.

Responsibilities

• Build CI/CD pipelines and distribute through TestFlight, Play Internal/Closed, and MSIX.
• Own release lifecycle including staging rollouts and mandatory updates.
• Manage signing keys and secrets across stores and platforms.
• Stand up production observability integrating Sentry/OpenTelemetry and dashboards.
• Build sideload/MDM channels for air‑gapped/regulated customers.
• Maintain SBOM generation, dependency pinning, and license scanning.
• Run infrastructure for CI agents and artifact storage.
• Lead on-call rotation and drive postmortems into improvements.

Skills

Mobile release engineering

CI/CD Flutter

Code signing

Observability

Release strategy

Supply chain hygiene

Operational ownership

Tools

GitHub Actions

GitLab CI

Fastlane

Codemagic

Bitrise

App Store Connect

Play Console

EV certificates

1Password Secrets Automation

HashiCorp Vault

Sentry

OpenTelemetry

Job description

Three target platforms, four distribution channels, one team. Join Synmatch AI's client on the founding engineering team for the next generation of power-quality analysis software as the release and observability owner the engineer who keeps shipping boring, predictable, and frequent, and who makes sure they know what happens to the app after it leaves CI.

The distribution problem here is genuinely unusual. Windows MSIX with EV code signing for tablet customers. App Store and TestFlight for iOS. Play Store internal/closed tracks for Android. And for customers who can't or won't use public stores, a clean sideload/MDM channel (Intune, Workspace ONE). You'll own all of it pipelines, signing keys, secret hygiene, staged rollouts, crash-driven rollback paths.

Observability is the other half of the role. A local-first Flutter app in the field is invisible by default; you make it legible. Sentry, OpenTelemetry, custom metrics for offline-mode behavior, log redaction for customer data, and the symbolication and dashboards that turn a crash report into an actionable bug for the team. You build it, you run it: the pipeline is yours from green PR to incident response.

What you will do as a Mobile DevOps & Release Engineer...

• Build CI/CD Pipelines: GitHub Actions or GitLab CI with reusable workflows; Codemagic or Bitrise; Fastlane for iOS/Android signing and store delivery; MSIX packaging and signing for Windows
• Own Release Lifecycle: TestFlight, Play Internal/Closed, Microsoft Store/direct MSIX, staged rollouts, mandatory-update paths, crash-driven rollback
• Manage Signing Keys & Secrets: App Store Connect, Play Console, EV code-signing certificates for Windows; secret hygiene via 1Password Secrets Automation, GitHub OIDC, or equivalent
• Stand Up Production Observability: Sentry/Crashlytics, OpenTelemetry export, custom metrics for offline behavior, log-redaction discipline for sensitive customer data
• Build Sideload/MDM Channel: Air-gapped distribution paths for utility and regulated customers including Intune/Workspace ONE workflows
• Manage Supply-Chain Hygiene: SBOM generation (CycloneDX), dependency pinning, license scanning, basic Dart/Flutter security review
• Run Infrastructure: CI agents, artifact storage, symbolication services on modest Azure or AWS footprint
• Carry the Release Pager: Anchor on-call rotation for release and observability incidents, lead postmortems, turn each into pipeline improvement

What we are looking for…

• Mobile Release Engineering: Shipped at least one product across iOS, Android, and ideally Windows at scale
• CI/CD for Flutter: Hands-on with GitHub Actions or GitLab CI reusable workflows, Fastlane, Codemagic or Bitrise
• Code-Signing Fluency: App Store Connect, Play Console, EV certs for Windows with clean secret management story
• Production Observability: Sentry/Crashlytics setup, OpenTelemetry export, custom metrics, symbolication experience
• Update Strategy Thinking: Staged rollouts, mandatory updates, optional sideload channels lived through the trade-offs
• Supply-Chain Hygiene: SBOMs, dependency pinning, license scanning as habits not afterthoughts
• Operational Ownership: Expect to own both pipeline and production behavior of what it ships

Desirable (but not required):

• Prior experience with air-gapped or regulated-customer distribution (utility, military, healthcare)
• Microsoft Intune or Workspace ONE workflows
• SRE/DevOps background before moving into mobile release engineering
• 1Password Secrets Automation, HashiCorp Vault, or equivalent secret-management tools
• Renovate/Dependabot housekeeping at scale
• Test-driven development for pipeline-as-code and infrastructure modules
• Small-footprint cloud infra (Azure preferred, AWS also fine)

Benefits and perks…

• Compensation: Upto 30 LPA (based on experience).
• Real Release Problem: Three platforms, four channels, sensitive customer segments to solve for
• Autonomy: Own the pipeline as a product with a team that respects "automation-first" as a value
• Observability Investment: Telemetry budget is real and committed from day one
• Continuous Delivery Culture: No quarterly mega-releases; small changes flow continuously
• Fully Remote: Async-first defaults with in-person time for release-day reviews