Skip to main content

Senior CIAM Software Engineer

Affirm
Remote - CanadaUpdated 44d ago
Total compensation
$153k–$213k
Published total compensation range
Location
Remote - Canada
Remote eligibility
Employment
Full-time
Senior
Role family
Engineering
Fintech
Apply on job-boards.greenhouse.io
Job actionsApply now
Job actionsApply now

About the job

About Affirm

Affirm is building the next generation of customer identity and authentication. This role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth.

What you'll do

  • Design, build, and operate core CIAM backend services supporting customer registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms.
  • Implement and extend identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code.
  • Develop backend APIs and services in Python and Kotlin.
  • Integrate CIAM platforms with internal systems, including user data stores, messaging, fraud signals, and downstream customer platforms.
  • Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent, and adaptive authentication logic.
  • Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
  • Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection.

What we look for

  • Strong experience designing and implementing CIAM systems with deep knowledge of OAuth 2.0, OIDC, SAML, and SCIM.
  • 5+ years of professional backend software engineering experience.
  • Strong production experience in Python or similar backend language.
  • Experience designing APIs, automation frameworks, and distributed systems.
  • Hands-on experience with CI/CD pipelines, GitHub workflows, and Buildkite.
  • Cloud-native development experience, preferably AWS.
  • Experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C.
  • Solid understanding of backend and distributed systems fundamentals.
  • Experience with Infrastructure as Code (Terraform) and CI/CD pipelines.
  • Strong security fundamentals including access control, token handling, encryption, MFA, and privacy by design.
  • Familiarity with AI-augmented development tools like Cursor.

Compensation & Benefits

Base pay range: $153,000 - $213,000 per year. Total compensation may include monthly stipends for health, wellness, and tech spending, and benefits including 100% subsidized medical, dental, and vision coverage for you and your dependents. Employees may be eligible for equity rewards. Affirm offers flexible time off and generous holiday calendars, plus an employee stock purchase plan (ESPP).

Application

Apply via the provided link. By clicking 'Submit Application,' you acknowledge Affirm's Global Candidate Privacy Notice.

Skills & tags

What you can verify before applying

Compare the essentials before you leave: pay, remote scope, employment type, source, and the employer apply destination.