Senior Backend Security and Identity Engineer

About Uphold

Uphold is a financial technology company that believes on-chain services are the future of finance. It provides modern infrastructure for on-chain payments, banking, and investments. Offering Consumer Services, Business Services, and Institutional Trading, Uphold makes pioneering financial services easy and trusted for millions of customers in more than 140 countries. Uphold strips away the complexity and lack of transparency to open up Web3 finance for everyone.

To learn more about Uphold, please visit

We're building a new team to own and transform how Uphold approaches identity, authentication, and security across our global multi-asset platform. The Senior Backend Security and Identity Engineer is a foundational role where you'll shape the future of secure access for millions of users managing crypto, fiat, and precious metals.

You’ll design and deliver state‑of‑the‑art authentication systems (from passkeys to multi‑factor challenges), strengthen compliance controls for regulated environments, and improve the user experience while improving security. This role combines deep technical expertise with leadership responsibilities – you'll architect critical systems, evaluate vendors, and eventually build and lead a team.

• Design, build, and improve identity and authentication infrastructure that balances user experience with regulatory requirements.
• Implement modern authentication solutions including passkeys, Web Authn, and advanced multi‑factor authentication mechanisms (2FA, OTP, biometrics).
• Build systems that enable continuous monitoring, compliance reporting, and forensic analysis for fraud prevention and regulatory teams.
• Collaborate closely with Product, Fraud Prevention, Compliance, and Regulatory teams to ensure security solutions meet business and legal requirements.
• Research, evaluate, and select third‑party identity providers, security vendors, and authentication platforms.
• Architect and implement integrations with external identity and security solutions.
• Design systems that comply with financial regulations, ensuring strong customer authentication (SCA) and auditability.
• Develop and maintain technical documentation, security policies, and architecture decision records.
• Lead hiring, coaching, and development of team members as the team grows.
• Other duties may be assigned as needed.

• Bachelor's degree in Computer Science, Engineering, or equivalent practical experience.
• 5+ years of relevant work experience in backend engineering with deep expertise in identity, authentication, and security systems.
• Deep experience with at least one of these languages and strong familiarity with the other:
  JavaScript (node.js) or Golang.
• Proficient in authentication protocols and standards (OAuth2, OIDC, SAML, Web Authn, FIDO2).
• Experience building and scaling identity platforms at fintech companies or security‑focused engineering roles at scale.
• Understanding of risk‑based authentication, fraud prevention patterns, and security controls in financial products.
• Knowledge of regulatory frameworks impacting authentication (e.g., PSD2, KYC/AML requirements).
• Proven ability to architect secure, auditable systems that balance user experience with compliance needs.
• Experience evaluating and integrating third‑party identity and security vendors.
• Strong communication and organizational skills.
• Strong problem‑solving skills.
• Ability to work under pressure.
• Team‑oriented and collaborative.
• Interest and readiness to take on people‑management responsibilities as the team grows.

• Work is performed in a hybrid office environment in New York, NY.
• Regular collaboration in person and remotely with engineering and cross‑functional teams is expected.
• Standard office environment with computer workstation setup.

• Occasional travel to business meetings as needed (up to 10% of the time).

• Experience with modern authentication methods like passkeys, biometric authentication, or risk‑based adaptive authentication.
• Background in highly regulated environments (banking, payments, crypto).
• Familiarity with security frameworks and…