What you will work on

• This is a full-time role (40 hours/week) for a 2-month contract
• Estimated Hours: 125-176 hours (depending on complexity and existing codebase readiness)

1. Authenticate with SAML 2.0 using your IDP (8-12 hours)

• Configure SAML in Auth0 (e.g., set up a new connection, upload IDP metadata)
• Update login flow to replace existing authentication methods with SAML
• Ensure correct configuration of redirect URIs, assertion consumers, and logout endpoints
• Test using a staging IDP setup and debug assertion/audience mismatches
• Key Work: Auth0 setup, React Native login updates, testing

2. Specify which web browser to trigger for SSO authentication (6-8 hours)

• Implement react-native-inappbrowser-reborn to control browser selection
• Add configuration parameter for browser preference (e.g., Chrome, Safari)
• Test integration across iOS and Android browsers
• Handle cases where the specified browser is unavailable
• Key Work: Browser selection settings, invocation handling, testing

3. IP restrict app access (6-10 hours)

• Implement middleware to validate user IP against an allowlist/blocklist
• Configure IP restrictions in Auth0 or a proxy layer (e.g., AWS API Gateway)
• Add UI error handling to display appropriate access restriction messages
• Key Work: Middleware setup, Auth0 configuration, UI updates, testing

4. Operate properly in an Android Enterprise Work Profile (8-12 hours)

• Use Android Enterprise test environment (e.g., Android Device Policy)
• Verify dependencies (storage, notifications, permissions) within the work profile
• Address storage isolation and cross-profile restrictions
• Key Work: Test environment setup, compatibility fixes, permissions adjustments

5. Push out app config via MDM (12-18 hours)

• Define app configuration parameters (e.g., JSON payload) for MDM distribution
• Integrate with MDM provider SDKs (e.g., Intune SDK)
• Parse and apply MDM configurations on app startup
• Key Work: MDM setup, SDK integration, configuration parsing, testing

6. Prevent unrecorded data exfiltration (10-15 hours)

• Enforce proxy/VPN whitelist for server communication
• Ensure HTTPS and strong TLS encryption for all transmissions
• Log outgoing requests for auditing
• Implement domain validation and SSL verification
• Key Work: Proxy/VPN setup, auditing, security enhancements, testing

7. Prevent copy/paste (6-10 hours)

• Block clipboard access using platform APIs
• Implement UIPasteboard override (iOS) and ClipboardManager restrictions (Android)
• Use secureTextEntry flag for sensitive fields in React Native
• Key Work: Clipboard API overrides, secure input handling, testing

8. Prevent screenshots (4-8 hours)

• Implement FLAG_SECURE for all Android activities
• Use UIScreenCapturedDidChangeNotification to detect iOS screenshots
• Display warnings or block actions when a screenshot is detected
• Key Work: Platform-specific security measures, UI enhancements, testing

9. Prevent moving data between apps or to storage (8-12 hours)

• Use Android Scoped Storage and iOS App Sandbox for file isolation
• Disable sharing intents (e.g., Share API)
• Block access to external storage paths
• Key Work: File system restrictions, API adjustments

10. Limit email/SMS to a specific app (10-15 hours)

• Implement deep links or custom schemes for launching designated email/SMS apps
• Add configuration options for preferred app selection
• Ensure fallback mechanisms for unavailable apps
• Key Work: Deep linking, app configuration, testing

11. Prevent email/SMS (4-6 hours)

• Remove app features that invoke email/SMS actions
• Block programmatic email/SMS sending using platform APIs
• Key Work: Code adjustments, feature restrictions

12. Prevent printing (6-10 hours)

• Disable export features that generate printable formats (e.g., PDFs)
• Block AirPrint using UIPrintInteractionController (iOS)
• Override print intents on Android
• Key Work: Export feature removal, platform print restrictions

13. Lock/unlock the app with a code or biometric (12-16 hours)

• Use react-native-keychain or similar libraries for biometric authentication
• Securely store user-defined PIN or passcode
• Implement a custom lock screen to verify PIN/biometric authentication
• Key Work: Secure storage, lock screen UI, biometric integration

14. Audit data handling in detail (15-20 hours)

• Implement detailed logging for data access and transactions
• Store logs securely (e.g., server logs, Datadog)
• Provide backend tools for reviewing audit trails
• Key Work: Data logging, backend integration, documentation

15. Documentation (10-12 hours)

• Provide feature overviews and setup instructions (e.g., SAML, MDM)
• Document troubleshooting guides for common issues
• Ensure clarity and accessibility for client use
• Key Work: Clear, detailed, client-focused documentation