Tech Lead Security and Identity Platform Backend NodeJS

Reap is looking for a Tech Lead Security and Identity Platform Backend NodeJS to build and operate secure identity, fraud protection, access governance, routing, and notification platform capabilities.

You will own the technical direction, architecture, and hands-on delivery of security and identity platform services. You will build authentication, fraud prevention, access controls, data routing, and notification infrastructure; operate secure AWS services; and mentor engineers through technical leadership.

• Architect, build, and operate the shared identity layer, including login, session management, and multi-factor authentication
• Design secure, reusable APIs and services for adoption by engineering teams
• Build capabilities that detect and prevent unauthorised access and account takeover
• Develop authorisation and access controls with reliable audit trails
• Design secure data and traffic routing for jurisdiction-specific requirements
• Build reliable infrastructure for security, risk, and transaction alerts
• Build and operate AWS services using CI/CD and infrastructure as code
• Embed threat modelling, security testing, monitoring, logging, and alerting into delivery
• Investigate incidents and address root causes
• Own architecture and design reviews, set engineering standards, and mentor engineers
• Partner with product and engineering teams to prioritise risk-reducing platform work
• Provide APIs, defaults, and documentation that make secure adoption easy
• Use AI tools responsibly for coding, debugging, testing, and documentation

• 8–10+ years of backend or platform engineering experience, including ownership of security-critical services or shared identity and access infrastructure in production
• At least 2+ years in a technical leadership role
• Strong understanding of authentication, authorisation, session security, MFA, and access control
• Experience with OAuth 2.0, OpenID Connect, secure-by-design practices, threat modelling, and least privilege
• Experience with Node.js and TypeScript or another backend language such as Go, Java, or Python
• Strong experience building APIs and event-driven or serverless systems
• Strong AWS, CI/CD, and infrastructure-as-code experience
• Experience with relational databases, schema design, and ORM frameworks such as TypeORM
• Ability to design for sensitive data protection, traceability, and audit trails
• Experience reasoning about threats, failure modes, and service dependencies
• Experience using AI coding tools with sound data handling and generated-code validation

• Flexible remote work environment