Platform / Release Engineer — Desktop Distribution & Reliability
Summary
Owns the desktop release pipeline and runtime reliability for COTID's Tauri v2 app on macOS (App Store + direct) and Windows (MSIX + direct): code signing, notarization, auto-updates, crash reporting, telemetry, and SRE practices, built with GitHub Actions, Rust, Python/Bash, and Sentry.
Compensation: 1.0% – 1.5%
Platform / Release Engineer — Desktop Distribution & Reliability
Compensation: Equity + Revenue Share
Type: Full-time
Remote: Optional
Own the desktop release pipeline and runtime reliability: code signing, notarization, auto-updates, crash reporting, and SRE practices for a Tauri v2 app shipping to macOS (App Store + direct) and Windows (MSIX + direct). You make "it just works" a reality across OS versions, hardware tiers, and security policies.
Responsibilities
- Release Pipeline: GitHub Actions / custom CI for multi-arch builds (macOS x64/ARM64, Windows x64/ARM64), artifact signing, notarization, MSIX packaging
- Code Signing & Certificates: Apple Developer ID, App Store Connect, Windows EV/Azure Trusted Signing, certificate rotation, timestamping
- Auto-Update System: Tauri updater plugin + DO Spaces CDN; staged rollouts, delta updates, fallback logic, signature verification
- App Store Operations: App Store Connect / Microsoft Partner Center submissions, review management, metadata, screenshots, compliance
- Crash & Error Reporting: Sentry / custom backend; symbolication (dSYM, PDB), grouping, alerting, regression detection
- Telemetry & Health: Opt-in metrics (startup time, memory, inference latency, feature adoption), privacy-preserving aggregation
- SRE Practices: SLIs/SLOs for release quality, error budgets, incident runbooks, on-call rotation (lightweight)
- Feature Flags & Gradual Rollouts: LaunchDarkly-style or homegrown; targeting by OS, hardware, user segment
- Dependency & Supply Chain: Cargo/deny, npm audit, SBOM generation, reproducible builds, supply-chain integrity
- Developer Experience: Local build parity, fast iteration, debug symbol workflows, one-command release cut
Qualifications
- 3+ years shipping signed, notarized desktop applications (macOS + Windows)
- Expert in Tauri v2 updater, code signing (codesign, notarytool, signtool, Azure Signing), MSIX/AppX packaging
- CI/CD mastery: GitHub Actions (macOS/Windows runners), self-hosted runner fleets, artifact management
- Crash reporting stack: Sentry (native + JS), symbolication pipelines, source-map management
- Scripting fluency: Rust (build scripts, Tauri hooks), Python/Bash (automation, notarization polling)
- SRE fundamentals: SLI/SLO definition, error budgets, incident command, blameless postmortems
- Security mindset: hardened runtime, entitlements, sandboxing, supply-chain attacks (SLSA)
Preferred
- Tauri v2 production experience (updater plugin, sidecar binaries, custom protocols)
- App Store / Microsoft Store review navigation (rejection appeals, guideline interpretation)
- Enterprise distribution: MDM, volume licensing, offline activation, air-gapped deployments
- Performance profiling: Instruments (macOS), ETW/PerfView (Windows), startup optimization
- Open-source contributions to Tauri, cargo-bundle, or similar packaging tooling
Tauri - rust
(React 19, TS, Lexical, custom grid, Recharts). Own the rendering layer: SVG shapes, theme-aware charts, and one shared selection/interaction system across the canvas, diagram, and shape editors.
Work
- Shared drag/resize/rotate + keyboard selection for all editors
- Extend token-driven chart theming and the SVG shape layer
- Design pass on pages/blocks (spacing, type, empty states)
- Print/preview layout polish
Skills
- React + TypeScript; strong SVG/canvas rendering
- Design-systems experience (CSS custom-property tokens, light/dark)
- Built or worked deep in an editor (Lexical, Slate, Draft, ProseMirror)
- Comfortable with the UI detail work
- Nice-to-have: Recharts/D3, Mermaid, dagre, Tauri