Product Security Engineer II - IAM & Automation (Remote)

Affirm, Inc.; Canada; Remote; CAD 133,000 - 183,000; Full time

Benefits offered by this job

100% subsidized medical coverage

Equity rewards

Remote-first with flexibility

Job summary

Affirm is seeking an engineer to join the InfoSec team focused on building and operating enterprise IAM. You will run core access lifecycle processes, troubleshoot production issues, and automate repetitive work, while developing backend services and integrations with SailPoint and Auth0.

You'll code in Python, work on APIs and distributed systems, and collaborate with Security, IT, and Engineering to deliver secure, auditable changes in a remote‑first setup across Canada.

Qualifications

• 2+ years of software engineering experience or equivalent internship/co‑op experience with strong projects.
• Ability to write, test, and operate production‑quality backend code in Python or a similar language
• Strong foundations in APIs, debugging, logging, error handling, and distributed systems
• Experience with GitHub, CI/CD, testing, and code review
• Comfort owning operational work and troubleshooting production issues
• Familiarity with cloud environments; AWS preferred
• Strong written communication and documentation skills

Responsibilities

• Run and improve IAM operations, including access lifecycle work, requests, certifications, and issue resolution
• Automate repetitive processes with scripts, services, and workflow improvements
• Build and maintain production backend software, APIs, tests, and integrations
• Connect SailPoint and workforce identity events with internal systems
• Build a paved path that enables affirm employees to create modern internal tools with Auth0
• Partner with Security, IT, and Engineering on secure, auditable changes
• Maintain runbooks, operational metrics, and escalation support

Skills

Python

Backend development

APIs

Distributed systems

GitHub

CI/CD

Tools

SailPoint

Auth0

Okta

OneLogin

Terraform

Job description

Affirm is seeking an engineer to join the InfoSec team focused on building and operating enterprise IAM. You will run core access lifecycle processes, troubleshoot production issues, and automate repetitive work, while developing backend services and integrations with SailPoint and Auth0.

You'll code in Python, work on APIs and distributed systems, and collaborate with Security, IT, and Engineering to deliver secure, auditable changes in a remote‑first setup across Canada.