Tech Lead Security and Identity Platform
Reap is a stablecoin-native financial infrastructure company providing business accounts, Visa corporate cards, global fiat payments, expense management, and embedded card and payment services.
Funding history
About Reap
Reap is a Hong Kong-founded fintech that bridges traditional finance and digital assets for global businesses. Its platform supports stablecoin-funded corporate cards, business payments settled in fiat, expense controls, treasury operations, and embedded card-issuing and payment infrastructure. Payward completed its acquisition of Reap on July 1, 2026; Reap continues operating as a standalone brand within the Payward ecosystem.
Skills
About the Role
You will set the technical direction, architecture, and delivery for shared security and identity services while remaining hands-on with code. You will build authentication, fraud prevention, access controls, data routing, and notifications infrastructure; operate services on AWS; embed secure delivery practices; investigate incidents; and mentor engineers.
Requirements
- 8–10+ years of backend or platform engineering experience.
- 2+ years in a technical leadership role.
- Experience owning security-critical services or shared identity and access infrastructure in production.
- Knowledge of authentication, authorisation, session security, MFA, access control, OAuth 2.0, and OpenID Connect.
- Experience with secure-by-design practices, threat modelling, and least privilege.
- Strong backend API and event-driven or serverless systems experience.
- Strong AWS, CI/CD, and infrastructure-as-code experience.
- Experience with relational databases, schema design, ORM frameworks, sensitive-data protection, traceability, and audit trails.
- Ability to reason about threats, failure modes, and dependencies across services.
- Experience using AI coding tools with sound data-handling and code-validation judgement.
Responsibilities
- Architect, build, and operate shared authentication and identity services, including login, session management, and multi-factor authentication.
- Design secure, reusable APIs and services for adoption by engineering teams.
- Build capabilities that detect and prevent unauthorised access and account takeover.
- Develop authorisation and access controls with reliable audit trails.
- Design secure data and traffic routing for jurisdiction-specific requirements.
- Build reliable infrastructure for security, risk, and transaction alerts.
- Build and operate AWS services using CI/CD and infrastructure as code.
- Embed threat modelling, security testing, monitoring, logging, and alerting into delivery.
- Investigate incidents and address root causes.
- Lead architecture and design reviews, set engineering standards, and mentor engineers.
- Prioritise platform work that reduces risk, unlocks markets, and removes duplicated effort.
- Use AI tools responsibly for coding, debugging, testing, and documentation.
Benefits
- Flexible remote work environment
- Use of AI tools at work
