Tech Lead, Security and Identity Platform

Reap; United States; Remote; USD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible remote work

Global team learning

Learning & experimentation

Job summary

Reap is seeking a hands-on Senior Backend/Platform Security Engineer to set technical direction for a shared security and identity platform used across multiple products. You will architect and operate authentication, session management, MFA, and secure APIs while delivering reusable services for product teams.

The role emphasizes building robust access controls, auditability, threat modeling, and data routing for new markets.

Qualifications

• 8–10+ years in backend/platform engineering with production security services experience.
• 2+ years in technical leadership, hands-on while guiding architecture.
• Strong knowledge of authentication/authorization, MFA, OAuth 2.0, OIDC, threat modeling.
• AWS backend, APIs, CI/CD, and infrastructure as code; Node.js/TypeScript preferred.

Responsibilities

• Architect and operate shared identity services for login, session mgmt, and MFA.
• Build controls to detect and prevent unauthorized access and account takeover.
• Establish authorization, access reviews, and audit trails.
• Develop data residency and traffic routing for new markets.
• Create delivery infra for security, risk, and alerts.
• Operate AWS with CI/CD and IaC; embed threat modeling and monitoring.
• Lead architecture reviews, set standards, mentor engineers, document APIs.

Skills

Auth & OAuth

MFA & Access Controls

Threat Modeling

OpenID Connect

AWS & Backend

CI/CD & IaC

Node.js / TS

Relational DB Design

Security Incident Response

Tools

Node.js

TypeScript

CI/CD

IaC (Terraform)

Job description

Role overview

Set technical direction for a shared security and identity platform used across multiple products. This hands‑on individual contributor role connects authentication, account protection, access governance, data routing, and security notifications into reusable services that help product teams move quickly while protecting users and sensitive operations. It does not require people management.

Responsibilities

• Architect and operate shared identity services for login, session management, and multi‑factor authentication, with secure APIs for other teams.
• Build controls to detect and prevent unauthorized access and account takeover, balancing protection with a smooth user experience.
• Establish consistent authorization, access reviews, and audit trails for investigations and regulatory or partner requirements.
• Develop data residency and traffic routing capabilities to support jurisdiction‑specific needs as new markets are entered.
• Create dependable delivery infrastructure for security, risk, and transaction alerts.
• Operate AWS services with CI/CD and infrastructure as code; embed threat modeling, security testing, monitoring, and incident follow-up into delivery.
• Lead architecture reviews, set engineering standards, mentor colleagues, and support adoption through clear APIs, defaults, and documentation.

Requirements

• 8–10 or more years in backend or platform engineering, including hands‑on ownership of production security‑critical services or identity and access systems.
• At least two years in technical leadership, with experience guiding architecture, mentoring engineers, and delivering complex work while remaining hands‑on.
• Strong knowledge of authentication, authorization, session security, MFA, access controls, OAuth 2.0, OpenID Connect, threat modeling, and least privilege.
• Strong AWS and backend experience, including APIs, production operations, CI/CD, and infrastructure as code; Node.js and TypeScript are preferred, with other languages considered.
• Relational database experience, including schema design and auditability, plus the ability to reason across service threats, dependencies, and failure modes.
• Careful use of AI coding tools, including validation of generated code and safeguards for sensitive data.

Nice to have

• Experience with fraud prevention, account takeover, data residency, or security platforms in fintech, payments, crypto, or other regulated settings.
• Relevant cybersecurity certifications.

Benefits and work setup

• Flexible remote work with a global team, use of AI tools, and opportunities for learning and experimentation.