Product Security Engineer II: IAM & Backend (Remote)

Affirm, Inc.; Ottawa; Remote; CAD 133,000 - 183,000; Full time

Benefits offered by this job

Health coverage

Monthly stipends

Flexible time off

Employee stock purchase plan

Job summary

Affim is building the next generation of enterprise Identity and Access Management. This remote-first role combines IAM operations, automation, and production software engineering to improve reliability, scalability, and operability of identity services across internal systems.

You will run core access lifecycle processes and build backend services that connect identity platforms with internal systems. Ideal candidates have 2+ years of software engineering experience, strong Python skills, and

Qualifications

• 2+ years of software engineering experience or equivalent internship/co-op experience with strong projects.
• Ability to write, test, and operate production-quality backend code in Python or a similar language.
• Strong foundations in APIs, debugging, logging, error handling, and distributed systems.
• Experience with GitHub, CI/CD, testing, and code review.
• Comfort owning operational work and troubleshooting production issues.
• Familiarity with cloud environments; AWS preferred.
• Strong written communication and documentation skills.

Responsibilities

• Run and improve IAM operations, including access lifecycle work, requests, certifications, and issue resolution
• Automate repetitive processes with scripts, services, and workflow improvements
• Build and maintain production backend software, APIs, tests, and integrations
• Connect SailPoint and workforce identity events with internal systems
• Build a paved path that enables Affim employees to create modern internal tools with Auth0
• Partner with Security, IT, and Engineering on secure, auditable changes
• Maintain runbooks, operational metrics, and escalation support

Skills

Python

APIs

Distributed systems

GitHub/CI-CD

Testing

Tools

SailPoint

Auth0

Okta

OneLogin

Terraform

Job description

Affim is building the next generation of enterprise Identity and Access Management. This remote-first role combines IAM operations, automation, and production software engineering to improve reliability, scalability, and operability of identity services across internal systems.

You will run core access lifecycle processes and build backend services that connect identity platforms with internal systems. Ideal candidates have 2+ years of software engineering experience, strong Python skills, and