Full Stack Engineer (Frontend Oriented) — Identity & Security

About the Team 

The Identity & Security team owns the front door to Binance. We build and operate the registration, login, and account security experience used by every one of our 300M+ users — social login, OAuth and third-party authorization, multi-factor authentication, passkeys and FIDO2, device management, account activity, and account closure.

We are currently building an in-house AI facial recognition security product for KYC verification and user safety, replacing our existing third-party vendor solution. This is a to-C product serving hundreds of millions of users, directly impacting account security and identity verification experience at scale.

Our work sits where three forces meet: enormous scale, strict security and regulatory constraints, and the reality that one extra verification step can block an attacker or lock out a legitimate user. We ship across web, mobile mini programs, and in-app webviews, and we publish the shared authentication libraries and SDKs that the rest of Binance builds on.

Responsibilities

Design, develop, and maintain the login, registration, and account security applications across web and mobile clients
Build the in-house AI facial recognition security product end to end — KYC verification, liveness detection, face matching — replacing the existing third-party vendor solution
Build authentication capabilities end to end: passkeys / FIDO2 (WebAuthn), authenticator apps, security keys, SMS and email verification, and biometric flows
Own the multi-factor authentication orchestration layer — verification strategy, step-up logic, and user-level customization — balancing security strength against completion rate with measurable outcomes
Collaborate closely with the AI algorithm team to integrate facial recognition, liveness detection, and other AI model capabilities into the product frontend and backend, building high-concurrency, low-latency online inference services
Maintain and evolve the shared security component and logic libraries consumed by multiple product applications, and the authentication SDKs published to teams across the company; take responsibility for bundle size, initialization behavior, and backward compatibility
Develop and operate the Node.js server-side layer: server-side rendering, route-level authentication guards, session validation and redirects, localized routing, and first-paint performance
Build and refine the BFF layer — aggregating upstream security services and turning raw error codes into results the frontend can consume and users can act on
Implement platform-specific behavior for web, mini program, and low-end device targets while keeping shared and platform-specific code cleanly separated
Drive engineering quality: unit and end-to-end test coverage, instrumentation and observability, build and local development experience
Use funnel and event data to find drop-off in login and verification flows, and drive optimization from evidence rather than intuition
Collaborate closely with product, design, risk, customer support, backend, iOS, and Android teams; independently own the end-to-end design and delivery of a sub-domain such as passkeys, MFA orchestration, or facial recognition verification

Minimum qualifications

Bachelor's or Master's degree in Computer Science, Engineering, or equivalent industry experience
3–8 years of frontend or full stack engineering experience, including consumer-facing products taken from zero to one or evolved over multiple years
Strong web fundamentals: HTML, CSS, JavaScript/TypeScript, browser rendering, networking, caching, and performance optimization
Deep proficiency in React 18+ and TypeScript, with solid command of state management, data-fetching patterns, and complex multi-step form and flow orchestration
Production Node.js experience: server-side rendering or isomorphic applications, BFF layering, API aggregation and caching, and the ability to independently debug server-side runtime issues
A clear methodology for modeling complex flows — authentication and verification are highly branched, stateful, interruptible, and resumable, and need to be abstracted into testable, reusable models rather than nested conditionals
Solid engineering practice: modular architecture, component design, unit and E2E testing, CI/CD, and responsible judgment on breaking changes to shared libraries (versioning, staged rollout, rollback)
Proficient with AI-assisted development tools (Cursor / Claude Code / Copilot, etc.) with practical experience incorporating them into daily development workflows
Strong analytical and troubleshooting skills for diagnosing production issues, compatibility problems, and performance bottlenecks independently
Fluent in Mandarin, able to collaborate effectively with China-based teams
Effective communication in English within a distributed, cross-timezone, multi-team environment

Nice to have

Experience at AI / computer vision companies in business-side frontend or fullstack development
Hands-on experience in identity and authentication: WebAuthn / FIDO2 / passkeys, TOTP, OAuth 2.0 / OIDC, JWT and token lifecycle management, risk engines, or device fingerprinting
Experience building to-C security products, identity verification, or KYC-related products
Experience replacing third-party vendor solutions with in-house systems, ensuring smooth business transition
Knowledge of AI model engineering: model inference services, RAG systems, AI Agent architecture, or computer vision model integration
Cross-platform experience: mini programs, hybrid applications, and in-app webview bridging and debugging
Experience shipping shared component libraries or SDKs to third-party consumers — multi-entry bundling, tree-shaking, semantic versioning, and integration support
Internationalization and localization at scale: date and number formatting, RTL, and regional compliance differences
Background in finance, payments, or another high-security domain, with an understanding of the product trade-offs compliance imposes
Experience with monitoring and alerting, staged rollout, and A/B experimentation
Docker / Kubernetes / CI-CD pipeline experience