Remote Identity & Access Security Engineer

Affirm, Inc.; Winnipeg; Remote; CAD 133,000 - 183,000; Full time

Benefits offered by this job

Health coverage

Stipends for tech setup

Flexible time off

ESPP

Job summary

Affim is building the next generation of enterprise IAM. This role blends hands‑on IAM operations, automation, and production software engineering to make identity services more reliable and scalable.

You will run core access lifecycle processes, troubleshoot production issues, and automate repetitive work while building backend services and integrations that connect identity platforms with internal systems.

Qualifications

• 2+ years of software engineering experience or equivalent internship/co‑op experience with strong projects.
• Ability to write, test, and operate production‑quality backend code in Python or a similar language.
• Strong foundations in APIs, debugging, logging, error handling, and distributed systems.
• Experience with GitHub, CI/CD, testing, and code review.
• Comfort owning operational work and troubleshooting production issues.
• Familiarity with cloud environments; AWS preferred.
• Strong written communication and documentation skills.

Responsibilities

• Run and improve IAM operations, including access lifecycle work, requests, certifications, and issue resolution.
• Automate repetitive processes with scripts, services, and workflow improvements.
• Build and maintain production backend software, APIs, tests, and integrations.
• Connect SailPoint and workforce identity events with internal systems.
• Build a paved path that enables Affim employees to create modern internal tools with Auth0.
• Partner with Security, IT, and Engineering on secure, auditable changes.
• Maintain runbooks, operational metrics, and escalation support.

Skills

Python

APIs

Distributed systems

GitHub

CI/CD

Testing

AWS

Documentation

Tools

SailPoint

Auth0

Okta

Terraform

Job description

Affim is building the next generation of enterprise IAM. This role blends hands‑on IAM operations, automation, and production software engineering to make identity services more reliable and scalable.

You will run core access lifecycle processes, troubleshoot production issues, and automate repetitive work while building backend services and integrations that connect identity platforms with internal systems.