Senior CIAM Software Engineer
Affirm- Total compensation
- $153k–$213k Published total compensation range
- Location
- Remote - Canada Remote eligibility
- Employment
- Full-time Senior
About the job
About Affirm
Affirm is building the next generation of customer identity and authentication. This role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth.
What you'll do
- Design, build, and operate core CIAM backend services supporting customer registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms.
- Implement and extend identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code.
- Develop backend APIs and services in Python and Kotlin.
- Integrate CIAM platforms with internal systems, including user data stores, messaging, fraud signals, and downstream customer platforms.
- Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent, and adaptive authentication logic.
- Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
- Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection.
What we look for
- Strong experience designing and implementing CIAM systems with deep knowledge of OAuth 2.0, OIDC, SAML, and SCIM.
- 5+ years of professional backend software engineering experience.
- Strong production experience in Python or similar backend language.
- Experience designing APIs, automation frameworks, and distributed systems.
- Hands-on experience with CI/CD pipelines, GitHub workflows, and Buildkite.
- Cloud-native development experience, preferably AWS.
- Experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C.
- Solid understanding of backend and distributed systems fundamentals.
- Experience with Infrastructure as Code (Terraform) and CI/CD pipelines.
- Strong security fundamentals including access control, token handling, encryption, MFA, and privacy by design.
- Familiarity with AI-augmented development tools like Cursor.
Compensation & Benefits
Base pay range: $153,000 - $213,000 per year. Total compensation may include monthly stipends for health, wellness, and tech spending, and benefits including 100% subsidized medical, dental, and vision coverage for you and your dependents. Employees may be eligible for equity rewards. Affirm offers flexible time off and generous holiday calendars, plus an employee stock purchase plan (ESPP).
Application
Apply via the provided link. By clicking 'Submit Application,' you acknowledge Affirm's Global Candidate Privacy Notice.
Skills & tags
Compare the essentials before you leave: pay, remote scope, employment type, source, and the employer apply destination.