Fullstack Developer (Java, Golang, Python)
Fullstack developer building Mobile Device Management (MDM) software: backend services (device APIs, policy engines, command queues), admin web dashboards, and Android/iOS agent apps with features like remote lock/wipe and kiosk mode. Core stack: Java, Golang, Python, React/Vue + TypeScript, AWS, plus heavy device-security and cryptography work.
- Compensation
- Not disclosed
- Location
- Hồ Chí Minh, Vietnam
- Work setup
- Onsite
- Seniority
- Lead
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Fullstack
- Posted
Skills
Must have
- Bachelor's degree in IT, Computer Science, Information Security, or equivalent
- 3–5 years of experience in software development
- Backend: Golang, Java, Node.js or Python; RESTful API, SQL/NoSQL databases
- Frontend: React.js or Vue.js, TypeScript, responsive design
- Mobile: Android (Kotlin/Java) or iOS (Swift)
- Cloud: AWS basics (EC2, S3, Lambda) and Firebase Cloud Messaging
- Tools: Git, Docker, CI/CD, Agile/Scrum
- Working knowledge of on-device security chips/environments (SEP, Android Keystore/StrongBox, Key Attestation, TPM PCRs, HSM/cloud KMS)
- Understanding of Root of Trust, Secure Boot, Verified Boot, and attestation concepts
- Applied cryptography: AES modes, RSA, ECDSA/EdDSA/ECDH, SHA-2/SHA-3, HMAC, KDFs (HKDF, PBKDF2, Argon2)
- Use of well-vetted crypto libraries (Tink, libsodium, BoringSSL, BouncyCastle, JCA/JCE, CryptoKit)
- Data encryption: FDE/FBE, FileVault/APFS, envelope encryption (DEK/KEK)
- TLS 1.2/1.3, mTLS, certificate pinning, OCSP stapling, HSTS
- X.509, CSR, certificate chain validation, OCSP/CRL, SCEP, EST, ACME
- Digital signatures: signing/verifying commands and policies, APK/IPA signing, JWT/JWS
- Unit and integration testing, code reviews, and architectural contribution
- High autonomy, proactive problem-solving, eagerness to learn, collaboration
- Security mindset — ability to think like an attacker
- English reading comprehension for technical documentation
Nice to have
- Prior experience in mobile development or device security products
- React Native
- Awareness of ML-KEM (Kyber), ML-DSA (Dilithium), and post-quantum trends
- Familiarity with FIPS 140-2/140-3, NIST SP 800-series, Vietnamese cryptographic regulations
Full description
Top 3 Reasons To Join Us
- Full social, health & unemployment insurance
Annual learning and training budget
- 13th-month salary, Tet bonus, and project bonuse
The Job
1. GENERAL INFORMATION
- Position: Fullstack Developer
- Department: Engineering
- Report to: Tech Lead / Sub Lead
- Headcount: 4
- Level: Middle/ Senior
2. JOB PURPOSE
Develop backend, frontend, and mobile features for Mobile Device Management (MDM) products, ensuring high-quality code, performance, and security. Contribute to building a competitive MDM product in the Vietnamese market.
3. KEY RESPONSIBILITIES
- Develop backend services including device management APIs, policy engines, and command queues.
- Build web dashboards (Admin Consoles) for MDM administrators.
- Develop mobile agent applications on Android and/or iOS for managed devices.
- Implement MDM features such as remote lock/wipe, kiosk mode, and app blacklisting/whitelisting.
- Contribute to device security flows: enrollment, attestation, key provisioning, and certificate lifecycle (under Tech Lead guidance).
- Write unit and integration tests to ensure code coverage meets requirements.
- Participate in code reviews and contribute to architectural and procedural improvements.
- Fix bugs, optimize performance, and resolve technical debt.
- Stay updated with Android Enterprise, Apple MDM protocol, and SCEP/DEP.
Your Skills and Experience
4. REQUIREMENTS
4.1. Education
Bachelor's degree in IT, Computer Science, Information Security, or equivalent.
4.2. Experience
3–5 years of experience in software development. Prior experience in mobile development or device security products is preferred.
4.3. Technical Skills
a) Software Development
- Backend: Golang, Java, Node.js or Python; RESTful API, SQL/NoSQL databases.
- Frontend: React.js or Vue.js, TypeScript, responsive design.
- Mobile: Android (Kotlin/Java) or iOS (Swift); React Native is a plus.
- Cloud: AWS basic (EC2, S3, Lambda), Firebase Cloud Messaging.
- Tools: Git, Docker, CI/CD, Agile/Scrum.
b) Hardware Security & Trusted Execution
Working knowledge of on-device security chips/environments and how to use them in real-world applications (deep expertise in all platforms is not required):
- Basic understanding of SEP, key generation/storage via Secure Enclave–backed keys, biometric-bound keys, and Keychain access control.