Tech Lead Security and Identity Platform

Reap is looking for a Tech Lead Security and Identity Platform to build and operate secure identity, fraud protection, access governance, and platform services.

You will set the technical direction, architecture, and delivery for shared security and identity services while remaining hands-on with code. You will build authentication, fraud prevention, access controls, data routing, and notifications infrastructure; operate services on AWS; embed secure delivery practices; investigate incidents; and mentor engineers.

• Architect, build, and operate shared authentication and identity services, including login, session management, and multi-factor authentication.
• Design secure, reusable APIs and services for adoption by engineering teams.
• Build capabilities that detect and prevent unauthorised access and account takeover.
• Develop authorisation and access controls with reliable audit trails.
• Design secure data and traffic routing for jurisdiction-specific requirements.
• Build reliable infrastructure for security, risk, and transaction alerts.
• Build and operate AWS services using CI/CD and infrastructure as code.
• Embed threat modelling, security testing, monitoring, logging, and alerting into delivery.
• Investigate incidents and address root causes.
• Lead architecture and design reviews, set engineering standards, and mentor engineers.
• Prioritise platform work that reduces risk, unlocks markets, and removes duplicated effort.
• Use AI tools responsibly for coding, debugging, testing, and documentation.

• 8–10+ years of backend or platform engineering experience.
• 2+ years in a technical leadership role.
• Experience owning security-critical services or shared identity and access infrastructure in production.
• Knowledge of authentication, authorisation, session security, MFA, access control, OAuth 2.0, and OpenID Connect.
• Experience with secure-by-design practices, threat modelling, and least privilege.
• Strong backend API and event-driven or serverless systems experience.
• Strong AWS, CI/CD, and infrastructure-as-code experience.
• Experience with relational databases, schema design, ORM frameworks, sensitive-data protection, traceability, and audit trails.
• Ability to reason about threats, failure modes, and dependencies across services.
• Experience using AI coding tools with sound data-handling and code-validation judgement.

• Flexible remote work environment
• Use of AI tools at work