Tech Lead – Security and Identity Platform, Backend NodeJS

• Architect, build, and operate Reap’s shared identity layer, including login, session management, and multi-factor authentication
• Design secure, reusable APIs and services for engineering teams
• Build capabilities to detect and prevent unauthorised access and account takeover
• Partner with product and risk stakeholders to translate threats into practical controls
• Develop consistent authorisation and access controls with reliable audit trails
• Design secure data and traffic routing for jurisdiction-specific requirements
• Build reliable infrastructure for security, risk, and transaction alerts
• Build and operate services on AWS using CI/CD and infrastructure-as-code
• Embed threat modelling, security testing, monitoring, logging, and alerting into delivery
• Investigate incidents and address root causes
• Own architecture and design reviews and set engineering standards
• Mentor engineers while remaining hands-on
• Partner with the Knox PM and engineering teams to prioritise risk-reducing and market-enabling work
• Provide APIs, defaults, and documentation that make secure adoption easy
• Use AI tools responsibly for coding, debugging, testing, and documentation

• 8–10+ years in backend or platform engineering, including hands-on ownership of security-critical services or shared identity and access infrastructure in production
• At least 2+ years in a technical leadership role (Tech Lead or Engineering Manager)
• Track record of owning architecture decisions, mentoring engineers, and delivering complex projects end to end
• Strong understanding of authentication, authorisation, session security, MFA, and access control
• Experience implementing OAuth 2.0 and OpenID Connect
• Experience applying secure-by-design practices, threat modelling, and least privilege
• Preferably Node.js + TypeScript; strong backend engineers using Go, Java, or Python may be considered
• Experience building APIs and event-driven/serverless systems
• Strong AWS experience, including securing and operating production services
• Solid CI/CD and infrastructure-as-code practices
• Hands-on experience with relational databases such as AWS Aurora, PostgreSQL, or MySQL
• Experience with schema design and ORM frameworks such as TypeORM
• Ability to design for sensitive data protection, traceability, and reliable audit trails
• Ability to reason about threats, failure modes, and dependencies across services; debug complex issues; and balance security, reliability, developer experience, and delivery speed
• Comfortable using AI coding tools such as Cursor, GitHub Copilot, Claude Code, or Codex, with sound judgement about data handling and validation of generated code
• Experience with fraud prevention, account takeover protection, data residency, or security platforms in fintech, payments, crypto, or other regulated environments is a plus
• Relevant cybersecurity certifications are a plus

• Flexible remote work environment with a global, collaborative team
• Use of AI tools at work, with space to learn, experiment, and grow
• Culture of innovation, inclusion, and continuous learning