Tech Lead - Secure Identity Platform (Remote)

Reap; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible remote work

Global team learning

Learning & experimentation

Job summary

Reap is seeking a hands-on Senior Backend/Platform Security Engineer to set technical direction for a shared security and identity platform used across multiple products. You will architect and operate authentication, session management, MFA, and secure APIs while delivering reusable services for product teams.

The role emphasizes building robust access controls, auditability, threat modeling, and data routing for new markets.

Qualifications

• 8–10+ years in backend/platform engineering with production security services experience.
• 2+ years in technical leadership, hands-on while guiding architecture.
• Strong knowledge of authentication/authorization, MFA, OAuth 2.0, OIDC, threat modeling.
• AWS backend, APIs, CI/CD, and infrastructure as code; Node.js/TypeScript preferred.

Responsibilities

• Architect and operate shared identity services for login, session mgmt, and MFA.
• Build controls to detect and prevent unauthorized access and account takeover.
• Establish authorization, access reviews, and audit trails.
• Develop data residency and traffic routing for new markets.
• Create delivery infra for security, risk, and alerts.
• Operate AWS with CI/CD and IaC; embed threat modeling and monitoring.
• Lead architecture reviews, set standards, mentor engineers, document APIs.

Skills

Auth & OAuth

MFA & Access Controls

Threat Modeling

OpenID Connect

AWS & Backend

CI/CD & IaC

Node.js / TS

Relational DB Design

Security Incident Response

Tools

Node.js

TypeScript

CI/CD

IaC (Terraform)

Job description

Reap is seeking a hands-on Senior Backend/Platform Security Engineer to set technical direction for a shared security and identity platform used across multiple products. You will architect and operate authentication, session management, MFA, and secure APIs while delivering reusable services for product teams.

The role emphasizes building robust access controls, auditability, threat modeling, and data routing for new markets.