Tech Lead, Security and Identity Platform

This is a fully remote position, open to applicants anywhere in the world.

📋 Description

• Design, develop, and manage Reap’s unified identity layer, which encompasses login, session management, and multi-factor authentication.

• Create secure and reusable APIs and services tailored for engineering teams.

• Establish capabilities to identify and thwart unauthorized access and account takeovers.

• Collaborate with product and risk stakeholders to convert threats into actionable controls.

• Implement consistent authorization and access controls that maintain reliable audit trails.

• Develop secure data and traffic routing tailored to jurisdiction-specific requirements.

• Construct dependable infrastructure for security, risk, and transaction notifications.

• Manage and utilize AWS services through CI/CD and infrastructure-as-code methodologies.

• Integrate threat modeling, security testing, monitoring, logging, and alerting into the delivery process.

• Examine incidents and address their root causes.

• Take ownership of architecture and design reviews while establishing engineering standards.

• Guide engineers while maintaining a hands-on approach.

• Collaborate with the Knox PM and engineering teams to prioritize initiatives that reduce risk and enable market opportunities.

• Provide APIs, defaults, and documentation that facilitate secure platform adoption.

• Utilize AI tools responsibly for coding, debugging, testing, and documentation.

⛳️ Requirements

• 8–10+ years of experience in backend or platform engineering.

• Proven hands-on ownership of security-critical services or shared identity and access infrastructure in a production environment.

• Minimum of 2+ years in a technical leadership position, such as Tech Lead or Engineering Manager.

• Demonstrated history of making architecture decisions, mentoring engineers, and delivering complex projects from start to finish.

• Deep understanding of authentication, authorization, session security, multi-factor authentication (MFA), and access control.

• Familiarity with OAuth 2.0 and OpenID Connect.

• Knowledge of secure-by-design practices, threat modeling, and least privilege principles.

• Strong backend engineering experience, preferably in Node.js and TypeScript.

• Experience in building APIs and event-driven/serverless architectures.

• Extensive AWS experience, including the security and operation of production services.

• Proficiency in CI/CD and infrastructure-as-code practices.

• Direct experience with relational databases such as AWS Aurora, PostgreSQL, or MySQL.

• Knowledge of schema design and ORM frameworks like TypeORM.

• Ability to design solutions for sensitive data protection, traceability, and reliable audit trails.

• Capacity to analyze threats, failure modes, and interdependencies across services.

• Experience debugging complex challenges while balancing security, reliability, developer experience, and delivery speed.

• Proficient in using AI coding tools such as Cursor, GitHub Copilot, Claude Code, or Codex.

• Relevant cybersecurity certifications are advantageous.

• Experience in fraud prevention, account takeover protection, data residency, or security platforms within fintech, payments, crypto, or regulated environments is a plus.

🏝️ Benefits

• Flexible remote work environment with a global, collaborative team.

• Opportunity to utilize AI tools in the workplace, with room to learn, experiment, and grow.

• A culture emphasizing innovation, inclusion, and continuous learning.