When the developer certificate (Android and Windows) or provisioning profile (iOS) for an app has expired, you can upload a new valid developer certificate or provisioning profile. After that, you can upload and re-sign an app with the new certificate or profile without having to rebuild the app.

To re-sign apps, you need the site-level permission Manage Site. See also Overview of Site-Level Permissions.