Tech Lead, Security and Identity Platform

Role overview Set technical direction for a shared security and identity platform used across multiple products. This hands-on individual contributor role connects authentication, account protection, access governance, data routing, and security notifications into reusable services that help product teams move quickly while protecting users and sensitive operations. It does not require people management.

Responsibilities - Architect and operate shared identity services for login, session management, and multi-factor authentication, with secure APIs for other teams. - Build controls to detect and prevent unauthorized access and account takeover, balancing protection with a smooth user experience. - Establish consistent authorization, access reviews, and audit trails for investigations and regulatory or partner requirements. - Develop data residency and traffic routing capabilities to support jurisdiction-specific needs as new markets are entered. - Create dependable delivery infrastructure for security, risk, and transaction alerts. - Operate AWS services with CI/CD and infrastructure as code; embed threat modeling, security testing, monitoring, and incident follow-up into delivery. - Lead architecture reviews, set engineering standards, mentor colleagues, and support adoption through clear APIs, defaults, and documentation.

Requirements - 8–10 or more years in backend or platform engineering, including hands-on ownership of production security-critical services or identity and access systems. - At least two years in technical leadership, with experience guiding architecture, mentoring engineers, and delivering complex work while remaining hands-on. - Strong knowledge of authentication, authorization, session security, MFA, access controls, OAuth 2.0, OpenID Connect, threat modeling, and least privilege. - Strong AWS and backend experience, including APIs, production operations, CI/CD, and infrastructure as code; Node.js and TypeScript are preferred, with other languages considered. - Relational database experience, including schema design and auditability, plus the ability to reason across service threats, dependencies, and failure modes. - Careful use of AI coding tools, including validation of generated code and safeguards for sensitive data.

Nice to have - Experience with fraud prevention, account takeover, data residency, or security platforms in fintech, payments, crypto, or other regulated settings. - Relevant cybersecurity certifications.

Benefits and work setup - Flexible remote work with a global team, use of AI tools, and opportunities for learning and experimentation.