Sobre

Title: GrapheneOS / Android Build Engineer for Commercial-Scale Secure Phone Line Summary for Upwork posting (you can paste this directly): I’m looking for an experienced Android / AOSP / GrapheneOS engineer who can help me take a privacy-focused phone concept from “one device” to repeatable, commercial-scale production. The core goal is to ship Pixel devices with GrapheneOS (or a rebranded fork) pre-installed, fully hardened, verified, and ready for end users. I’m not looking for a hobby flash script—I need someone who understands secure supply chains, automated flashing, signing, and OTA updates and can design a process that scales from dozens to thousands of devices. What I need you to build / advise on • Design a repeatable flashing and provisioning pipeline for Pixel devices (fastboot/USB, scripting, verification). • Set up or advise on CI/CD for GrapheneOS-based builds (official builds or a rebranded fork), including build servers and artifact management. • Implement a secure signing process (preferably HSM-backed or equivalent best practice). • Design and configure OTA update infrastructure (update server, channel strategy, rollback handling, emergency security patches). • Create standard device hardening profiles (owner / daily-use profiles, pre-installed privacy apps, default settings). • Document everything clearly so non-expert technicians can follow the process on a production line. Ideal experience • Deep hands-on experience with AOSP, custom ROMs, or GrapheneOS (building from source, not just flashing). • Strong knowledge of Android security, verified boot, Pixel bootloader unlock/lock flows, and attestation. • Experience running build infrastructure at scale (CI/CD, build farms, automated testing). • Familiarity with Linux server admin and scripting (Bash, Python, etc.). • Bonus: experience with secure hardware key management, HSMs, or similar. If you’ve previously built or maintained a custom Android/GrapheneOS fork, or helped a company ship secure phones at scale, please share specific examples (what you built, device count, and your role). I’m ready to move quickly and will pay well for the right expert who can help design this for security first, then scale later. i have the server and hardware infrastructure. I am also willing to negotiate revenue share for each sale.