Tech Lead, Security and Identity Platform (Backend NodeJS)

Role overview Lead the technical direction and hands-on delivery of a shared security and identity platform used across multiple products. The work spans identity, account protection, access governance, data routing, and alerting, with a focus on making secure capabilities reliable and straightforward for other engineering teams to adopt. This is a senior individual contributor role; people management is not required.

Responsibilities - Design and operate shared login, session, and multi-factor authentication services, with reusable APIs for product teams. - Build controls to detect and prevent unauthorised access and account takeover, working with product and risk stakeholders. - Establish consistent authorisation, access reviews, and audit trails to support investigations and regulatory or client requirements. - Create secure data and traffic routing capabilities for jurisdiction-specific needs as products expand into new markets. - Develop dependable security, risk, and transaction notification infrastructure. - Run AWS services and improve secure delivery through threat modelling, testing, monitoring, incident investigation, and root-cause fixes; set technical standards and mentor engineers.

Requirements - 8–10+ years in backend or platform engineering, including production ownership of security-critical services or shared identity and access infrastructure. - 2+ years in technical leadership, with experience guiding architecture, mentoring engineers, and delivering complex work end to end. - Strong knowledge of authentication, authorisation, session security, MFA, access control, OAuth 2.0, and OpenID Connect. - Backend API and event-driven or serverless development experience; Node.js and TypeScript are preferred, with other backend languages considered. - Strong AWS, CI/CD, and infrastructure-as-code experience, plus hands-on relational database and schema design skills. - Ability to assess threats and service failure modes while balancing security, reliability, developer experience, and delivery speed.

Nice to have - Experience with fraud prevention, account takeover controls, data residency, or security platforms in fintech, payments, crypto, or another regulated setting. - Relevant cybersecurity certifications. - Familiarity with AI coding tools and good judgement when reviewing generated code or handling sensitive data.

Benefits and work setup - Flexible remote work with a globally distributed team. - Opportunity to use AI tools and develop new skills in a collaborative environment.