11 Oct
|
ElevenX Capital
|
Gurugram
11 Oct
ElevenX Capital
Gurugram
About the Project
Panorama Pro is QuickLaunch's Identity & Access Management (IAM) mobile app. This engagement covers a mix of bug fixes on the existing app and current development across login, multi-factor authentication (MFA), account recovery, and account management flows, followed by security hardening and app store publishing.
Core Responsibilities
- Fix existing defects: login performance/slow app-open, cross-device logout, tap-target issues on Forgot Password/Username, first-time-user (FTU) validation bugs, and Android 16KB memory page size compliance (Jira DEV-8420)
- Build Entra ID / Active Directory login support, including group-based login display (passwordless vs. 2FA), AD account notifications (expired/locked/disabled), and brute-force/MFA-attempt notifications
- Implement MFA factor validation and management: Email OTP, Phone OTP, Authenticator (Google/Microsoft/Twilio), Security Questions, Mobile Push, and new Passkey support (Figma to be provided by QuickLaunch)
- Build account activation flows (first-time password creation, with/without email-phone auth) and recovery-page flows (password policy, blacklisted passwords)
- Rework the FTU-without-MFA-configured flow: in-app prompt to configure MFA immediately, then return to login
- Fix duplicate-device display and add device-name differentiation for multi-device registrations
- Maintain Gitlab-based release process; deliver app + deployment documentation; support staging preprod (beta/signoff) production (GA) promotion
- Remediate any VAPT-identified vulnerabilities and secure all open APIs (existing and new)
- Handle App Store / Play Store key & certificate management, and handover publishing access to QuickLaunch's DevOps team
- Need to implement app-based MFA post login based on app policy
- Implement hybrid password less functionality on tenant admin and end user side, based on the policy the user will decide to login through which flow (hybrid-password less or 2FA)
Required Skills
- Strong native iOS (Swift) and/or Android (Kotlin) experience, or equivalent cross-platform (React Native/Flutter) with platform-specific publishing experience
- Hands-on experience with authentication/IAM concepts: OAuth/SAML/OIDC, MFA, SSO, Entra ID/Active Directory integration
- Experience implementing biometric/passkey authentication
- Git/Gitlab workflows and CI/CD across staging, preprod, and prod
- App Store Connect and Google Play Console publishing, including compliance fixes (e.g., 16KB page size)
- Basic API security awareness (able to work with a VAPT report and close findings)
- Comfortable working against a Figma handoff for new screens
📌 Mobile App Developer (Gurugram)
🏢 ElevenX Capital
📍 Gurugram