At OneSpan, we specialize in digital identity and anti-fraud solutions that create exceptional and secure experiences.
OneSpan is currently looking for a Staff Engineer — Mobile SDK to join our team in Barcelona.
We're looking for a Staff Engineer to join our Mobile SDK team and elevate how we build, test, and ship security-critical software. This is a hands-on technical leadership role where you'll define engineering standards, build quality infrastructure, and enable the team to deliver SDKs that protect mobile applications for major financial institutions worldwide.
What You'll Own
- Technical standards and infrastructure: Define engineering standards across the SDK codebase (written in C) and build the infrastructure that enforces them automatically: quality gates, release automation, and developer tooling that makes doing the right thing the easy thing.
- Code quality and architectural guidance: Review critical code paths across Android and iOS with deep attention to edge cases, error handling, and failure modes. Guide the team toward more robust design decisions through thoughtful questioning and technical mentorship.
- Cross-functional technical leadership: Bridge between SDK engineering and security teams. Structure technical collaboration patterns that enable effective contribution without compromising code quality or introducing risk.
- Technical decision-making and tradeoff analysis: Lead technical discussions on API design, performance optimization, security implementation, and platform-specific behavior. Make informed decisions on complex tradeoffs where there's no obvious right answer.
- Team growth and technical mentorship: Elevate the team's technical judgment and problem-solving capabilities. Help senior engineers develop deeper intuition about system behavior, anticipate failure modes, and think more critically about their technical decisions.
- Release engineering and operational excellence: Own the end-to-end release process for both platforms, including versioning strategy, deployment coordination, rollback procedures, and post-release monitoring. Ensure we can ship confidently and recover quickly when issues arise.
Technical Context
Our SDK is built in C for performance and security, integrating into mobile applications used by millions of people at major banks and financial institutions.
The challenges you'll help solve:
- Multi-platform complexity: Maintaining API consistency between Android and iOS while respecting platform-specific idioms and leveraging native capabilities effectively.
- SDK integration patterns: Designing initialization flows, error handling, and lifecycle management that work seamlessly across hundreds of different customer application configurations.
- System reliability and observability: Building instrumentation and diagnostic capabilities that surface issues early, enable rapid root cause analysis, and help the team understand how SDKs behave in production environments.
- Technical decision-making: Leading architecture reviews, evaluating tradeoffs between security, performance, and developer experience, and making critical technical decisions that affect SDK design and implementation.
What We're Looking For
Technical foundation
- Strong hands-on experience with Android or iOS SDK development (10+ years), with solid working knowledge of the other platform. You understand mobile platform internals, threading models, memory management, and platform-specific security mechanisms.
- A demonstrated habit of identifying failure modes not explicitly covered by the test plan: edge cases, production conditions, and integration behaviors the team didn't design for.
- Experience with release engineering: CI/CD pipelines, automated testing infrastructure, and version management for software that can't be easily patched after shipping.
- Comfort at the boundary of application and security engineering: you don't need to be a security researcher, but you need to understand threat models, know when specialized security review is required, and evaluate security-performance tradeoffs effectively.
Leadership and judgment
- Experience defining and enforcing engineering standards in a team environment, with the credibility and communication skills to make them stick. The seniority and credibility to set engineering standards and hold them.
- Technical mentorship experience: You've helped senior engineers develop deeper judgment through code review, pairing, and asking the right questions at the right time.
- Pragmatic risk management: You know how to balance thorough review with shipping velocity, when to dig deeper versus when to trust the team, and how to focus energy on the highest-impact quality improvements.
Nice to have
- Experience testing or developing C/C++ components, particularly with Google Test framework
- Background in cybersecurity
- Experience in banking, fintech, healthcare, or other highly regulated industries where defects have real-world consequences
Why This Role Matters
Our SDKs protect financial transactions and personal data for millions of users. When we ship quality software, we enable our customers to focus on building great applications. When we don't, the consequences are real; for them, for their users, and for the trust they've placed in us.
We're looking for someone who takes that responsibility seriously and has the technical depth and leadership experience to help us continuously raise the bar on how we build and ship.
If you're energized by hard technical problems, care deeply about quality, and want to make a meaningful impact on software that protects millions of people, we'd love to hear from you.
Why OneSpan
OneSpan offers the best of both worlds – a solid foundation that only an established global enterprise can provide, with the energy and creativity of an innovative start-up. In every role at OneSpan, you’ll contribute to the success of the most advanced cybersecurity and have opportunities to grow.
#LI-hybrid
#LI-LS1