Tech Lead Security and Identity Platform Backend NodeJS
Reap is a stablecoin-native financial infrastructure company providing business accounts, Visa corporate cards, global fiat payments, expense management, and embedded card and payment services.
Funding history
About Reap
Reap is a Hong Kong-founded fintech that bridges traditional finance and digital assets for global businesses. Its platform supports stablecoin-funded corporate cards, business payments settled in fiat, expense controls, treasury operations, and embedded card-issuing and payment infrastructure. Payward completed its acquisition of Reap on July 1, 2026; Reap continues operating as a standalone brand within the Payward ecosystem.
Skills
About the Role
You will own the technical direction, architecture, and hands-on delivery of security and identity platform services. You will build authentication, fraud prevention, access controls, data routing, and notification infrastructure; operate secure AWS services; and mentor engineers through technical leadership.
Requirements
- 8–10+ years of backend or platform engineering experience, including ownership of security-critical services or shared identity and access infrastructure in production
- At least 2+ years in a technical leadership role
- Strong understanding of authentication, authorisation, session security, MFA, and access control
- Experience with OAuth 2.0, OpenID Connect, secure-by-design practices, threat modelling, and least privilege
- Experience with Node.js and TypeScript or another backend language such as Go, Java, or Python
- Strong experience building APIs and event-driven or serverless systems
- Strong AWS, CI/CD, and infrastructure-as-code experience
- Experience with relational databases, schema design, and ORM frameworks such as TypeORM
- Ability to design for sensitive data protection, traceability, and audit trails
- Experience reasoning about threats, failure modes, and service dependencies
- Experience using AI coding tools with sound data handling and generated-code validation
Responsibilities
- Architect, build, and operate the shared identity layer, including login, session management, and multi-factor authentication
- Design secure, reusable APIs and services for adoption by engineering teams
- Build capabilities that detect and prevent unauthorised access and account takeover
- Develop authorisation and access controls with reliable audit trails
- Design secure data and traffic routing for jurisdiction-specific requirements
- Build reliable infrastructure for security, risk, and transaction alerts
- Build and operate AWS services using CI/CD and infrastructure as code
- Embed threat modelling, security testing, monitoring, logging, and alerting into delivery
- Investigate incidents and address root causes
- Own architecture and design reviews, set engineering standards, and mentor engineers
- Partner with product and engineering teams to prioritise risk-reducing platform work
- Provide APIs, defaults, and documentation that make secure adoption easy
- Use AI tools responsibly for coding, debugging, testing, and documentation
Benefits
- Flexible remote work environment