Staff Software Engineer, Android Identity

The Wrap; San Francisco (CA); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Gusto is seeking a skilled Mobile Engineer with 8+ years of mobile experience to join the Identity Engineering team. You will build and scale secure login and authentication experiences for our Android app, integrating biometric methods and passkeys to protect customer data.

You will collaborate with Product, Design, Security, and Infrastructure to deliver scalable solutions, mentor junior engineers, and help shape a security-first mobile platform across Gusto.

Qualifications

• 6+ years in Kotlin Android and 8+ years mobile software engineering.
• Strong knowledge of GraphQL and MVVM patterns.
• Experience with biometric auth and passkey solutions.
• Proven ability to mentor engineers.
• Security-focused mindset with secure coding practices.

Responsibilities

• Architect, build, test, and refine Gusto's Android app and mobile web-views.
• Implement biometric login and passkey solutions to improve security.
• Collaborate with product, design, and security teams to solve problems, prototype, iterate, and launch.
• Mentor junior engineers and champion best practices.
• Ensure privacy and security compliance across mobile products.

Skills

Kotlin Android

Mobile software engineering

GraphQL

MVVM

Biometric authentication

Passkeys (FIDO2/WebAuthn)

Mentorship

Cross-functional collaboration

Communication

Security minded

Tools

BiometricPrompt API

WebAuthn / FIDO2

Android Keystore

Encrypted shared preferences

Job description

About Gusto

At Gusto, we're on a mission to grow the small business economy. We handle the hard stuff - payroll, health insurance, 401(k)s, and HR - so owners can focus on their craft and their customers. With teams in Denver, San Francisco, and New York, we support more than 500,000 small businesses nationwide and are building a workplace that reflects the people we serve.

All full-time employees receive competitive base pay, benefits, and equity (RSUs) - because everyone who helps build Gusto should share in its success. Offer amounts are determined by role, level, and location. Learn more about our Total Rewards philosophy.

AI is a fundamental part of how work gets done at Gusto. We expect all team members to actively engage with AI tools relevant to their role and grow their fluency as the technology evolves. AI experience requirements vary by role and will be assessed during the interview process.

About the Team

The Identity Engineering team is responsible for safeguarding customer accounts by enabling secure login and authentication.

We operate under the principle of "Frictionless Security", ensuring that all Gusto users have seamless yet secure access to their designated entities.

At our core, Login and Authentication are our products, but Secured Login and Authentication is our business. Our focus is not just on enabling access but on delivering a security-first experience that protects every customer interaction.

About the Role

We're looking for a talented and motivated Mobile Engineer with 8+ years of experience to join our Identity Engineering team. In this role, you'll play a key part in developing seamless and secure login and authentication experiences that protect our customers' most sensitive data. You'll build and scale secure, frictionless authentication solutions, own and enhance shared services that power Identity across Gusto's platform, and stay ahead of best practices, tooling, and advancements in Identity security. Collaboration is key—you'll work closely with teams across Payroll, Benefits, HR, Security, System Design, and Infrastructure to deliver scalable, high-impact solutions. If you're passionate about building elegant, scalable solutions and strengthening a high-performing mobile team, we'd love to have you on board!

Here's what you'll do day-to-day:

• Architect, build, test, and refine Gusto's native Android app and supporting mobile web-views
• Build, iterate, and refine experiences that allow users to successfully and easily access key product features and offerings
• Integrate biometric authentication methods (fingerprint, face unlock) and passkey functionalities to enhance user login security and improve user experience
• Implement and maintain secure coding practices to protect user data and ensure compliance with privacy regulations
• Collaborate with our product management, design, and other partner teams to understand technical and customer pain points, come up with solutions, and then prototype, iterate, and launch
• Mentor other junior engineers
• Build a product that our customers genuinely love. Don't just take our word for it - check out what some customers have to say.

Here’s what we’re looking for:

• At least 6 years of experience in Kotlin Android development and a minimum of 8 years in mobile software engineering
• Strong knowledge of GraphQL
• Self-driven mindset, and the ability to work on green field projects
• Working knowledge of MVVM
• Experience with Android testing frameworks and best practices
• Experience implementing biometric authentication (BiometricPrompt API) and passkey solutions (FIDO2/WebAuthn) in mobile applications
• Experience in constructing platform and common components to enhance scalability, consistency, and maintainability throughout the product development lifecycle
• Strong critical thinking skills, and a keen attention to detail
• Strong communication and cross-functional partnership skills
• Commitment to continuous learning and mentorship

Bonus Points:

• Previous knowledge of the Android security model, including the Android Keystore system, encrypted shared preferences, and secure networking practices
• Previous experience in a security-focused role or with security-related projects is a plus
• Ability to deliver high-quality code across a diverse