Full Stack Engineer (Frontend Oriented) — Identity & Security

Responsibilities

• Design, develop, and maintain the login, registration, and account security applications across web and mobile clients
• Build the in-house AI facial recognition security product end to end — KYC verification, liveness detection, face matching — replacing the existing third-party vendor solution
• Build authentication capabilities end to end: passkeys / FIDO2 (WebAuthn), authenticator apps, security keys, SMS and email verification, and biometric flows
• Own the multi-factor authentication orchestration layer — verification strategy, step-up logic, and user-level customization — balancing security strength against completion rate with measurable outcomes
• Collaborate closely with the AI algorithm team to integrate facial recognition, liveness detection, and other AI model capabilities into the product frontend and backend, building high-concurrency, low-latency online inference services
• Maintain and evolve the shared security component and logic libraries consumed by multiple product applications, and the authentication SDKs published to teams across the company; take responsibility for bundle size, initialization behavior, and backward compatibility
• Develop and operate the Node.js server-side layer: server-side rendering, route-level authentication guards, session validation and redirects, localized routing, and first-paint performance
• Build and refine the BFF layer — aggregating upstream security services and turning raw error codes into results the frontend can consume and users can act on
• Implement platform-specific behavior for web, mini program, and low-end device targets while keeping shared and platform-specific code cleanly separated
• Drive engineering quality: unit and end-to-end test coverage, instrumentation and observability, build and local development experience
• Use funnel and event data to find drop-off in login and verification flows, and drive optimization from evidence rather than intuition
• Collaborate closely with product, design, risk, customer support, backend, iOS, and Android teams; independently own the end-to-end design and delivery of a sub-domain such as passkeys, MFA orchestration, or facial recognition verification