Tech Lead, Security and Identity Platform

As Tech Lead for Security and Identity Platform at Reap, you own the shared security and identity foundations that every engineering team builds on: authentication and identity, fraud and account takeover protection, access governance, data residency and routing, and notifications infrastructure. You'll act as a senior individual contributor, owning technical direction, architecture, and delivery while staying hands-on with code. No people management is required. You'll build these capabilities as one connected, trusted platform rather than separate solutions, making security an enabler of growth in a regulated, global fintech.

What you'll do

• Architect, build, and operate the shared identity layer across Reap's products, including login, session management, and multi-factor authentication, designing secure, reusable APIs and services that other engineering teams can adopt confidently.
• Build platform capabilities that detect and prevent unauthorised access and account takeover before funds move, partnering with product and risk stakeholders to translate threats into practical controls that protect clients without unnecessary friction.
• Develop consistent authorisation and access controls with reliable audit trails that support access reviews, incident investigation, and regulatory, partner, and client security requirements.
• Design secure data and traffic routing that supports jurisdiction-specific requirements as Reap enters new markets, working with relevant stakeholders to turn those requirements into reusable platform capabilities.
• Build reliable, correctly targeted infrastructure for security, risk, and transaction alerts, with the delivery speed and visibility needed when something goes wrong.
• Build and operate services on AWS using CI/CD and infrastructure-as-code. Embed threat modelling, security testing, monitoring, logging, and alerting into delivery, investigate incidents, and address root causes to prevent recurrence.
• Own architecture and design reviews, set engineering standards, and mentor engineers while remaining hands-on. Partner with the Knox PM and other engineering teams to prioritise work that reduces risk, unlocks markets, and removes duplicated effort. Provide clear APIs, defaults, and documentation that make the secure path easy to adopt.
• Use AI tools responsibly for coding, debugging, tests, and documentation, with appropriate review and safeguards for sensitive data and security-critical code.

What you bring

• 8-10+ years in backend or platform engineering, including hands-on ownership of security-critical services or shared identity and access infrastructure in production.
• At least 2+ years in a technical leadership role (Tech Lead or Engineering Manager), with a track record of owning architecture decisions, mentoring engineers, and delivering complex projects end to end.
• Strong understanding of authentication, authorisation, session security, MFA, and access control, with experience implementing identity standards such as OAuth 2.0 and OpenID Connect and applying secure-by-design practices, threat modelling, and least privilege.
• Strong backend experience, preferably Node.js and TypeScript, with experience building APIs and event-driven or serverless systems. You can ramp up quickly if you are a strong backend engineer using other languages such as Go, Java, or Python.
• Strong AWS experience, including securing and operating production services, with solid CI/CD and infrastructure-as-code practices.
• Hands-on experience with relational databases (AWS Aurora, PostgreSQL, MySQL), schema design, and ORM frameworks such as TypeORM. You can design for sensitive data protection, traceability, and reliable audit trails.
• Ability to reason about threats, failure modes, and dependencies across services, debug complex issues, and balance security, reliability, developer experience, and delivery speed.
• Comfort using AI coding tools such as Cursor, GitHub Copilot, Claude Code, or Codex, with sound judgement about data handling and validation of generated code.

Nice to have

• Experience with fraud prevention, account takeover protection, data residency, or security platforms in fintech, payments, crypto, or other regulated environments.
• Relevant cybersecurity certifications.

What we offer

• A high-impact role in a rapidly growing fintech startup
• Flexible remote work environment with a global, collaborative team
• Use of AI tools at work, and the space to learn, experiment, and grow with them
• A culture of innovation, inclusion, and continuous learning

About Reap

Reap is a global financial technology company headquartered in Hong Kong, enabling financial connectivity and access for businesses worldwide by combining traditional finance with stablecoins for efficient money movement. The company offers stablecoin-powered corporate cards, payments, expense management tools, and APIs that help businesses integrate stablecoin-enabled finance into their products and services. Backed by leading investors including Acorn Pacific, Index Ventures, and HashKey Capital, Reap is building the future of borderless, stablecoin-enabled finance.