Remote Staff CIAM Engineer Build Secure Identity Platforms

Affirm; San Juan de Terranova; On-site; CAD 181,000 - 241,000; Full time

Benefits offered by this job

Equity

Health coverage for dependents

Stipends for health and tech

Remote-first

Job summary

Affirm is building the next generation of customer identity and authentication. This senior CIAM backend role designs and ships core services that power registration, login, and account life cycle across B2C and B2B experiences.

You will implement standards like OAuth 2.0, OIDC, SAML, and SCIM while delivering secure, scalable backend APIs in Python and Kotlin. As a remote-first company, you will collaborate with a global engineering team, leverage AWS, MySQL, Spark, and Kubernetes, and

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale.

Responsibilities

• Design, build, and operate core CIAM backend services for registration, authentication, authorization, and profile management.
• Implement and extend OAuth 2.0, OIDC, SAML, and SCIM in code with scalable patterns.
• Develop backend APIs and services in Python and Kotlin for web, mobile, and partner applications.
• Integrate CIAM platforms with internal systems, including user data stores and fraud signals.
• Own secure authentication and account flows end to end, including MFA and adaptive authentication.
• Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance and resilience.

Skills

Backend design

Distributed systems

Python/Kotlin

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

APIs

CI/CD

Terraform

Infrastructure as Code

Security fundamentals

Cursor

Tools

Cursor

Job description

Affirm is building the next generation of customer identity and authentication. This senior CIAM backend role designs and ships core services that power registration, login, and account life cycle across B2C and B2B experiences.

You will implement standards like OAuth 2.0, OIDC, SAML, and SCIM while delivering secure, scalable backend APIs in Python and Kotlin. As a remote-first company, you will collaborate with a global engineering team, leverage AWS, MySQL, Spark, and Kubernetes, and