Tech Lead, Security and Identity Platform; Backend NodeJS

About Reap Reap is a global financial technology company headquartered in Hong Kong with employees across multiple countries. We enable financial connectivity and access for businesses worldwide by combining traditional finance with stable coins for efficient money movement.

Through our stablecoin-powered corporate cards, payments, and expense management tools, we streamline financial operations and help businesses scale. Our APIs enable businesses to integrate stablecoin-enabled finance into their own products and services—from issuing Visa cards to facilitating cross-border payments.

Backed by leading investors including Acorn Pacific, Index Ventures and Hash Key Capital, Reap is building the future of borderless, stablecoin-enabled finance.

Why Reap This team owns the shared security and identity foundations that every other engineering team at Reap builds on: authentication and identity, fraud and account takeover protection, access governance, data residency and routing, and notifications infrastructure. As we expand into new markets and products, these foundations must help teams ship faster while protecting our business and clients from unnecessary loss.

This role is a senior individual contributor position, acting as the Tech Lead for our Security and Identity Platform. You'll own technical direction, architecture, and delivery while staying hands-on with the code — no people management is required. You'll build these capabilities as one connected, trusted platform, rather than separate solutions that each product team has to reinvent. It's an opportunity to make security an enabler of growth in a regulated, global fintech.

• Authentication & identity:
  Architect, build, and operate the shared identity layer across Reap's products, including login, session management, and multi-factor authentication. Design secure, reusable APIs and services that other engineering teams can adopt confidently.
• Fraud & account protection:
  Build platform capabilities that detect and prevent unauthorised access and account takeover before funds move. Partner with product and risk stakeholders to translate threats into practical controls that protect clients without unnecessary friction.
• Access governance & auditability:
  Develop consistent authorisation and access controls, with reliable audit trails that support access reviews, incident investigation, and regulatory, partner, and client security requirements.
• Data residency & routing:
  Design secure data and traffic routing that supports jurisdiction‑specific requirements as Reap enters new markets, working with relevant stakeholders to turn those requirements into reusable platform capabilities.
• Notifications infrastructure:
  Build reliable, correctly targeted infrastructure for security, risk, and transaction alerts, with the delivery speed and visibility needed when something goes wrong.
• Secure delivery & reliability:
  Build and operate services on AWS using CI/CD and infrastructure‑as‑code (IaC). Embed threat modelling, security testing, monitoring, logging, and alerting into delivery; investigate incidents and address root causes to prevent recurrence.
• Technical leadership & platform adoption:
  Own architecture and design reviews, set engineering standards, and mentor engineers while remaining hands‑on. Partner with the Knox PM and other engineering teams to prioritise work that reduces risk, unlocks markets, and removes duplicated effort. Provide clear APIs, defaults, and documentation that make the secure path easy to adopt.
• AI‑assisted engineering:
  Use AI tools responsibly for coding, debugging, tests, and documentation, with appropriate review and safeguards for sensitive data and security‑critical code.

• Experience:
  
  8–10+…