Platform / Release Engineer — Desktop Distribution & Reliability

Platform / Release Engineer — Desktop Distribution & Reliability

Compensation: Equity + Revenue Share
Type: Full-time

Remote: Optional

Own the desktop release pipeline and runtime reliability: code signing, notarization, auto-updates, crash reporting, and SRE practices for a Tauri v2 app shipping to macOS (App Store + direct) and Windows (MSIX + direct). You make "it just works" a reality across OS versions, hardware tiers, and security policies.

Responsibilities

• Release Pipeline: GitHub Actions / custom CI for multi-arch builds (macOS x64/ARM64, Windows x64/ARM64), artifact signing, notarization, MSIX packaging
• Code Signing & Certificates: Apple Developer ID, App Store Connect, Windows EV/Azure Trusted Signing, certificate rotation, timestamping
• Auto-Update System: Tauri updater plugin + DO Spaces CDN; staged rollouts, delta updates, fallback logic, signature verification
• App Store Operations: App Store Connect / Microsoft Partner Center submissions, review management, metadata, screenshots, compliance
• Crash & Error Reporting: Sentry / custom backend; symbolication (dSYM, PDB), grouping, alerting, regression detection
• Telemetry & Health: Opt-in metrics (startup time, memory, inference latency, feature adoption), privacy-preserving aggregation
• SRE Practices: SLIs/SLOs for release quality, error budgets, incident runbooks, on-call rotation (lightweight)
• Feature Flags & Gradual Rollouts: LaunchDarkly-style or homegrown; targeting by OS, hardware, user segment
• Dependency & Supply Chain: Cargo/deny, npm audit, SBOM generation, reproducible builds, supply-chain integrity
• Developer Experience: Local build parity, fast iteration, debug symbol workflows, one-command release cut

Qualifications

• 3+ years shipping signed, notarized desktop applications (macOS + Windows)
• Expert in Tauri v2 updater, code signing (codesign, notarytool, signtool, Azure Signing), MSIX/AppX packaging
• CI/CD mastery: GitHub Actions (macOS/Windows runners), self-hosted runner fleets, artifact management
• Crash reporting stack: Sentry (native + JS), symbolication pipelines, source-map management
• Scripting fluency: Rust (build scripts, Tauri hooks), Python/Bash (automation, notarization polling)
• SRE fundamentals: SLI/SLO definition, error budgets, incident command, blameless postmortems
• Security mindset: hardened runtime, entitlements, sandboxing, supply-chain attacks (SLSA)

Preferred

• Tauri v2 production experience (updater plugin, sidecar binaries, custom protocols)
• App Store / Microsoft Store review navigation (rejection appeals, guideline interpretation)
• Enterprise distribution: MDM, volume licensing, offline activation, air-gapped deployments
• Performance profiling: Instruments (macOS), ETW/PerfView (Windows), startup optimization
• Open-source contributions to Tauri, cargo-bundle, or similar packaging tooling

Tauri - rust

(React 19, TS, Lexical, custom grid, Recharts). Own the rendering layer: SVG shapes, theme-aware charts, and one shared selection/interaction system across the canvas, diagram, and shape editors.

Work

• Shared drag/resize/rotate + keyboard selection for all editors
• Extend token-driven chart theming and the SVG shape layer
• Design pass on pages/blocks (spacing, type, empty states)
• Print/preview layout polish

Skills

• React + TypeScript; strong SVG/canvas rendering
• Design-systems experience (CSS custom-property tokens, light/dark)
• Built or worked deep in an editor (Lexical, Slate, Draft, ProseMirror)
• Comfortable with the UI detail work
• Nice-to-have: Recharts/D3, Mermaid, dagre, Tauri