Tech Lead Security and Identity Platform Backend NodeJS

You will own the technical direction, architecture, and hands-on delivery of security and identity platform services. You will build authentication, fraud prevention, access controls, data routing, and notification infrastructure; operate secure AWS services; and mentor engineers through technical leadership.

Responsibilities

• Architect, build, and operate the shared identity layer, including login, session management, and multi-factor authentication
• Design secure, reusable APIs and services for adoption by engineering teams
• Build capabilities that detect and prevent unauthorised access and account takeover
• Develop authorisation and access controls with reliable audit trails
• Design secure data and traffic routing for jurisdiction-specific requirements
• Build reliable infrastructure for security, risk, and transaction alerts
• Build and operate AWS services using CI/CD and infrastructure as code
• Embed threat modelling, security testing, monitoring, logging, and alerting into delivery
• Investigate incidents and address root causes
• Own architecture and design reviews, set engineering standards, and mentor engineers
• Partner with product and engineering teams to prioritise risk-reducing platform work
• Provide APIs, defaults, and documentation that make secure adoption easy
• Use AI tools responsibly for coding, debugging, testing, and documentation

Requirements

• 8–10+ years of backend or platform engineering experience, including ownership of security-critical services or shared identity and access infrastructure in production
• At least 2+ years in a technical leadership role
• Strong understanding of authentication, authorisation, session security, MFA, and access control
• Experience with OAuth 2.0, OpenID Connect, secure-by-design practices, threat modelling, and least privilege
• Experience with Node.js and TypeScript or another backend language such as Go, Java, or Python
• Strong experience building APIs and event-driven or serverless systems
• Strong AWS, CI/CD, and infrastructure-as-code experience
• Experience with relational databases, schema design, and ORM frameworks such as TypeORM
• Ability to design for sensitive data protection, traceability, and audit trails
• Experience reasoning about threats, failure modes, and service dependencies
• Experience using AI coding tools with sound data handling and generated-code validation

Benefits

• Flexible remote work environment