Note: The job is a remote job and is open to candidates in USA. Fusemachines is a global provider of enterprise AI products and services, on a mission to democratize AI. They are seeking a Senior Android Engineer to develop and manage VPN solutions while ensuring strong networking fundamentals and security measures are implemented.
Responsibilities
- Building and managing a VPN tunnel, routing, DNS handling, per-app VPN, always-on VPN behaviour
- Packet capture/forwarding, MTU, TCP/UDP basics as they apply to tunnelling
- Strong networking fundamentals: TCP/UDP, TLS, DNS, HTTP(S), proxies, NAT concepts, latency/packet loss handling
- Integrating VPN cores using NDK/JNI (C/C++)
- Release hardening: R8/Proguard, crash/ANR monitoring, Play Console workflows
- Building and shipping native libraries for multiple ABIs (arm64-v8a, armeabi-v7a)
- Experience with Gradle/CMake native builds
- Prior VPN product experience (consumer or enterprise)
- Play policy experience for VPN apps
- Experience building 'core VPN SDK + app shell' architecture
Skills
- Kotlin, coroutines/Flow, modern Android architecture
- VpnService: building and managing a VPN tunnel, routing, DNS handling, per-app VPN, always-on VPN behaviour
- TUN interface concepts: packet capture/forwarding, MTU, TCP/UDP basics as they apply to tunnelling
- Strong networking fundamentals: TCP/UDP, TLS, DNS, HTTP(S), proxies, NAT concepts, latency/packet loss handling
- NDK/JNI experience (C/C++) for integrating VPN cores (strongly preferred)
- Release hardening: R8/Proguard, crash/ANR monitoring, Play Console workflows
- Building and shipping native libraries for multiple ABIs (arm64-v8a, armeabi-v7a)
- Experience with Gradle/CMake native builds
- WireGuard (keypairs, allowed-ips, handshake/keepalive behaviour)
- OpenVPN (TLS, config formats, cypher suites, connection stability)
- IKEv2/IPsec (EAP/TLS or PSK auth options, MOBIKE, NAT-T), strongSwan
- Android Keystore, secure storage, encryption, certificate handling/pinning where appropriate
- Threat modelling, least-privilege design, privacy-first telemetry
- Prior VPN product experience (consumer or enterprise)
- Play policy experience for VPN apps
- Experience building “core VPN SDK + app shell” architecture
- Shadowsocks / custom tunnelling
- Backend/DevOps (Optional)
- One backend stack: Go/Java/Node/Python + PostgreSQL (or equivalent)
- Secure API design, secrets management (KMS/Vault), rate limiting
- Linux networking: iptables/nftables, routing, sysctl tuning
- Infra-as-code and CI/CD; monitoring (Prometheus/Grafana), centralized logs
- Automated provisioning pipeline for servers and user/device configs
- Monitoring dashboards + alerting; documented runbooks
Benefits
- Full-Time, Remote (6-month contractual job with possibility of extension)
Company Overview
Company H1B Sponsorship