Contact person: Secure Cross-Platform Enterprise App

Phone:Show

Email:Show

Location: Jersey City, United States

Budget: Recommended by industry experts

Time to start: As soon as possible

Project description:
"I need a senior mobile developer to build a production-ready iOS and Android application that can pass enterprise security review and give my team deep, actionable insights.

Core requirements
• Advanced authentication: the app must let users log in with biometric unlock (Touch ID / Face ID on Apple devices and the equivalent on Android), support time-based 2FA codes or push notifications, and integrate with our corporate SSO provider (OIDC/SAML). All three options need to coexist so administrators can enable or disable each one from a settings file or remote config.
• Analytics: embed user-behavior tracking, performance metrics, and real-time crash reporting. I want event funnels and retention cohorts we can view in Mixpanel or Firebase, plus low-level performance and crash data similar to what Crashlytics provides.
• Platforms: a single, maintainable codebase that ships to both App Store and Google Play. I am open to native Swift/Kotlin, Flutter, or React Native—choose whichever you can scale and test thoroughly.
• Security & compliance: data at rest and in transit must be encrypted, keys stored in each OS’s secure enclave/keystore, and the app should pass OWASP MASVS L1 checks.
• CI/CD: builds signed and delivered through GitHub Actions or Bitrise, including automated unit tests and a simple UI test suite.

Deliverables
1. Full source code with clear, inline documentation
2. Working builds uploaded to TestFlight and Google Play Internal Testing
3. Setup guide for SSO tenant configuration, 2FA, and biometric policy toggles
4. Analytics dashboard link or screenshots proving events, performance, and crash logs are flowing
5. One-hour hand-off call or screen share to walk through the architecture and deployment pipeline

When you reply, please tell me which tech stack you recommend, how you’ll implement the three auth layers without degrading UX, and an example of a past app where you wired up comparable analytics." (client-provided description)