Tech Lead – Security and Identity Platform, Backend NodeJS

This is a fully remote position, open to applicants in Bulgaria, +5 more countries.

📋 Description

• Design, develop, and manage Reap’s shared identity layer, which encompasses login, session management, and multi-factor authentication.

• Create secure and reusable APIs and services for engineering teams.

• Establish capabilities to identify and thwart unauthorized access and account takeovers.

• Collaborate with product and risk stakeholders to convert threats into actionable controls.

• Formulate consistent authorization and access controls with dependable audit trails.

• Design secure data and traffic routing that meets jurisdiction-specific requirements.

• Construct a reliable infrastructure for security, risk, and transaction alerts.

• Develop and manage services on AWS utilizing CI/CD and infrastructure-as-code practices.

• Integrate threat modeling, security testing, monitoring, logging, and alerting into the delivery process.

• Investigate incidents and address their root causes.

• Oversee architecture and design reviews while establishing engineering standards.

• Mentor engineers while maintaining hands-on involvement.

• Collaborate with the Knox PM and engineering teams to prioritize work that reduces risk and enables market opportunities.

• Provide APIs, defaults, and documentation that facilitate secure adoption.

• Responsibly utilize AI tools for coding, debugging, testing, and documentation.

⛳️ Requirements

• 8–10+ years of experience in backend or platform engineering, with hands-on responsibility for security-critical services or shared identity and access infrastructure in production.

• A minimum of 2+ years in a technical leadership position (Tech Lead or Engineering Manager).

• Proven track record of making architectural decisions, mentoring engineers, and successfully delivering complex projects from start to finish.

• Strong comprehension of authentication, authorization, session security, MFA, and access control mechanisms.

• Experience with implementing OAuth 2.0 and OpenID Connect.

• Familiarity with secure-by-design practices, threat modeling, and the principle of least privilege.

• Preferably experienced with Node.js + TypeScript; strong backend engineers proficient in Go, Java, or Python may also be considered.

• Background in building APIs and event-driven/serverless systems.

• Extensive AWS experience, including the security and operation of production services.

• Solid knowledge of CI/CD and infrastructure-as-code methodologies.

• Hands-on experience with relational databases such as AWS Aurora, PostgreSQL, or MySQL.

• Experience with schema design and ORM frameworks like TypeORM.

• Ability to design systems that protect sensitive data, ensure traceability, and maintain reliable audit trails.

• Skill in reasoning about threats, failure modes, and dependencies across services; debugging complex issues; and balancing security, reliability, developer experience, and delivery speed.

• Comfort in using AI coding tools such as Cursor, GitHub Copilot, Claude Code, or Codex, with sound judgment regarding data handling and validation of generated code.

• Experience in fraud prevention, account takeover protection, data residency, or security platforms within fintech, payments, crypto, or other regulated sectors is advantageous.

• Relevant cybersecurity certifications are a plus.

🏝️ Benefits

• Flexible remote work environment with a globally diverse, collaborative team.

• Access to AI tools in the workplace, with opportunities to learn, experiment, and grow.

• A culture that promotes innovation, inclusion, and continuous learning.