Release Engineer / DevOps — set up a cross-platform desktop release pipeline (short-term)

Release Engineer / DevOps — set up a cross-platform desktop release pipeline (short-term) for start up AI company (self-funded) We're shipping a local-first desktop app for macOS, Windows and Linux that bundles a local AI model into a single one-click installer (~1–2 GB). We need an experienced release engineer to build the release machinery end to end — you won't build the app itself. Scope: Git repo + branch protection; a GitHub Actions pipeline that turns one tagged commit into signed, notarised installers for all three platforms; code signing (Apple notarisation, Windows Authenticode/EV, Linux GPG) using a cloud HSM with OIDC (no keys on runners); CDN distribution with resumable downloads and a signed auto-update feed; and Microsoft Store/MSIX packaging. Estimated ~120 hours (range 90–160). Fully remote, hourly with a weekly cap. NDA before repo access. In your proposal: your CI platform experience, how you sign without exposing keys, and your rate. Indicative budget: at a low global contractor rate (~$15-25/hr), ~120 hours. Assumptions (please confirm in your proposal) App framework/stack is [to be confirmed] — this affects packaging and updater tasks; tell us your experience with ours. Certificate/account procurement lead times (esp. Apple + Windows EV) are handled in parallel and may gate final testing. Download web page is optional and can be dropped to reduce hours. Screening questions Share a release pipeline you've built that produces signed installers for macOS, Windows and Linux. What was the hardest part? How do you handle Apple notarisation and Windows SmartScreen reputation for a brand-new app? How would you sign in CI without exposing private keys on the runner? Which CDN would you choose for distributing a ~1.5 GB installer to a global audience, and why? Rough hours estimate for the scope above, and your hourly rate. Engagement terms Fully remote, hourly with a weekly cap, milestone check-ins. NDA required before repository access. Please include relevant portfolio links and your availability (hours/week).