Platform / Release Engineer (Desktop Distribution & Reliability)

Quick Facts

• Role: Platform / Release Engineer (Desktop Distribution & Reliability)

Description

Own the desktop release pipeline and runtime reliability for a Tauri v2 app across macOS and Windows. You will handle multi-arch CI/CD, code signing and notarization, auto-updates, crash reporting, phased rollouts, telemetry/health monitoring, and SRE practices. You also strengthen supply-chain security and manage app store submission operations.

Role Description

End-to-end ownership of releases and operational reliability for signed, notarized, auto-updating desktop builds.

Responsibilities

• Build and operate the release pipeline for multi-architecture (macOS x64/ARM64, Windows x64/ARM64) releases, including artifact signing, notarization, and MSIX packaging
• Manage Apple and Windows code-signing workflows (Apple Developer ID, App Store Connect, EV/Azure signing, certificate rotation, timestamping)
• Implement auto-update behavior using the Tauri updater plugin and a CDN (staged rollouts, delta updates, fallback logic, signature verification)
• Handle App Store Connect and Microsoft Partner Center submission workflows, including review management and compliance metadata
• Own crash/error reporting with symbolication (dSYM/PDB) and alerting/regression detection
• Define and monitor telemetry/health metrics with privacy-preserving aggregation
• Apply SRE practices using SLIs/SLOs, error budgets, incident runbooks, and lightweight on-call
• Implement feature flags and gradual rollouts (by OS, hardware, and user segment)
• Improve dependency and supply-chain integrity (Cargo deny, npm audit, SBOM generation, reproducible builds, SLSA-style controls)
• Ensure developer release experience via local build parity, fast iteration, debug symbol workflows, and one-command release cuts

Requirements

• 3+ years shipping signed, notarized desktop applications on macOS and Windows
• Expert knowledge of Tauri v2 updater, code signing/notarization tooling, and MSIX/AppX packaging
• Strong CI/CD with GitHub Actions for macOS/Windows runners and artifact management
• Experience with crash reporting stacks (Sentry native/JS), including symbolication and source-map management
• Scripting/automation ability in Rust plus Python or Bash
• SRE fundamentals: SLIs/SLOs, error budgets, incident command, blameless postmortems
• Security mindset for hardened runtime, entitlements/sandboxing, and supply-chain risk mitigation

Benefits

Compensation includes equity + revenue share.