Applications Architect

Project Description

The Identity and Access Management Practice (IAMP) is seeking to proceed with procurement of one (1) Fee-for-Service (FFS) resources to support the products and services of the IAMP Digital Credentials team (DCT), including the Enterprise Credentials Platform (ECP).

The resource will be sourced through the Managed Service Provider (MSP) for Contingent IT Resources Vendor of Record (VOR), with an estimated procurement value of $287,280. The engagement assignments will cover the period from April 1, 2026, to March 31, 2027.

Job Description

Key Responsibilities

• Lead the design, development, and delivery of enterprise‑grade iOS and Android applications using native (Swift, Objective‑C, Java) and hybrid (React Native, TypeScript) technologies.
• Architect secure, scalable mobile applications and oversee UI/UX implementation across multiple form factors, localizations, and OS‑specific patterns.
• Guide teams in building high‑performance, multithreaded apps leveraging device capabilities such as camera, Bluetooth, sensors, storage, and secure OS modules (Secure Enclave / TEE / Strongbox).
• Implement and maintain code quality standards, and robust testing practices to ensure high‑quality product delivery.
• Experience with Apple and Google wallets, or custom digital wallets, such as add passes/credentials to a wallet and mobile verifier app for credentials.
• Support publication and lifecycle management of apps in the Apple App Store or Google Play Store.
• Lead development and maintenance of the secure mobile applications by applying OS‑level security guidelines, secure coding practices, and ongoing patching and vulnerability fixes.
• Ensure comprehensive documentation of code, processes, system designs, and mobile architecture to support long‑term maintainability.
• Lead development of digital credential wallets and mobile identity solutions using W3C VC data models, DIDs, mDOC, and related decentralized identity technologies.
• Provide technical leadership on credential exchange, cryptographic protocols (OIDC, OAuth2, JWT/JWS,CBOR/COSE, ECDSA P-256,Ed25519, TLS, PKI), and standards compliance (PCTF,ODIF,IETF, NIST, eIDAS).
• Oversee integrations with backend services using REST, SOAP, event‑driven systems, and cloud‑native architectures (Docker, Kubernetes).
• Lead Agile development teams, facilitating sprint planning, backlog refinement, code reviews, and technical design sessions.
• Mentor developers and cultivate a strong engineering culture emphasizing user‑centered design, accessibility, performance, and secure engineering.
• Collaborate with product managers, UX designers, cybersecurity teams, and platform architects to align mobile engineering work with enterprise roadmaps and strategic goals.

This position is listed as "Onsite"; the resource is expected to work between the standard working hours of 8:00-5:00 PM (excluding lunch breaks) every Monday to Friday inclusive at the identified OPS office location.

Deliverables / Responsibilities

Mobile Development Leadership – 60%

• Lead the design, development, and delivery of enterprise‑grade iOS and Android applications using native technologies (Objective-C / Swift, Xcode or Java with Android Studio).
• Architect and implement both native and hybrid mobile applications, leveraging Swift, Java, React Native, and TypeScript, ensuring performance, security, and maintainability. Primarily the development is based on React Native and TypeScript.
• Oversee UI development to support different screen resolutions, localization, and OS‑specific UX patterns.
• Guide teams in building mobile applications, ensuring efficient use of device resources such as memory, storage, cameras, Bluetooth, sensors, and secure OS capabilities.
• Ensure delivery of high‑quality apps through continuous integration pipelines, automated builds, testing, and deployment workflows.
• Experience with Apple and Google wallets, or custom digital wallets, such as add credentials to a wallet and mobile verifier app for credentials.

• Knowledge of using Secure Enclave, TEE and/or Strongbox.

• Support publication and lifecycle management of apps in the Apple App Store or Google Play Store.
• Implement security fixes and patch updates to maintain the integrity and security posture of mobile applications.
• Document code, processes, and procedures to support knowledge sharing and long‑term maintainability of mobile solutions.
• Ensure compliance with secure coding practices, mobile OS security guidelines, and enterprise cyber standards.

Team Leadership, Delivery & Agile Practices – 20%

• Lead multidisciplinary development teams using Agile methodologies including sprint planning, backlog refinement, estimation, and technical ceremonies.
• Review and develop technical documentation, architecture artefacts, developer guides, and integration specifications.
• Support team adoption of Agile engineering practices including automated testing, test case development, CI/CD integration, and code quality processes.
• Mentor and coach developers, fostering a strong engineering culture focused on user‑centered design, accessibility, and secure coding.
• Effectively manage competing priorities, timelines, and deliverables in a fast‑paced environment.
• Collaborate with product, UX, cybersecurity, and platform teams to ensure alignment with enterprise strategy and technical roadmaps.

Back‑End Integration & API Architecture – 15%

• Oversee integration of mobile applications with RESTful APIs and secure back‑end platforms developed in Java, Node.js, Python and similar stacks.
• Provide guidance in developing solutions using distributed, event‑driven architectures, secure messaging systems, and cloud‑native containerized environments (Docker, Kubernetes).
• Ensure robust back‑end interaction patterns including authentication, authorization, encryption, and secure data exchange.

Digital Trust & Verifiable Credentials (VC) – 5%

• In-depth development experience with W3Cverifiable credential data model,ISO/IEC 18013-X, ISO/IEC 23220-X (mDOC),decentralized identifiers (DIDs), X.509 certificates, zero‑knowledge proof and OpenID4VC.
• Oversee development of React Native–based digital credentials wallets that use secure storage, OS cryptography APIs, and platform‑specific security modules.
• Ensure compliance with global digital identity standards and/or specifications such as W3C Verifiable Credentials, IETF, OIDF,PCTF, NIST, and eIDAS(ARF).
• Provide development guidance on wallet and security protocols such as OIDC, OIDF OpenID4VC/OpenID4VP, W3C DC-API,OAuth2, JWT/JWS(JOSE), TLS, PKI, CBOR/COSE, ECDSA P-256,Ed25519,SHA/SHA2, and RSA.
• Lead teams in developing responsive mobile interfaces, progressive web applications, and secure integration with back‑end identity services.