Senior CIAM Backend Engineer - Remote

Affirm; Toronto; On-site; CAD 251,000 - 334,000; Full time

Benefits offered by this job

Health coverage

Equity rewards

Stipends for health

Tech spending stipend

Time off

ESPP

Job summary

Affirm is seeking a hands-on CIAM backend engineer to design and ship core identity services for B2C and B2B platforms. You will build backend systems in Python and Kotlin, integrating OAuth 2.0, OIDC, SAML, and SCIM with scalable, secure APIs.

Lead end-to-end authentication flows, MFA, device binding, and adaptive challenges while automating infrastructure with IaC and CI/CD pipelines. This remote-first role offers strong health benefits and equity.

Qualifications

• Advanced hands-on CIAM design with OAuth 2.0, OIDC, SAML, and SCIM.
• 2nd item to fill

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and profile management.

Skills

CIAM systems

OAuth 2.0

OIDC

SAML

SCIM

Python

Kotlin

API design

Distributed systems

CI/CD pipelines

GitHub workflows

Buildkite

AWS

CIAM integration

Terraform

Security fundamentals

MFA

Communication

Cursor

Tools

Okta

Auth0

Ping Identity

ForgeRock

Azure AD B2C

Job description

Affirm is seeking a hands-on CIAM backend engineer to design and ship core identity services for B2C and B2B platforms. You will build backend systems in Python and Kotlin, integrating OAuth 2.0, OIDC, SAML, and SCIM with scalable, secure APIs.

Lead end-to-end authentication flows, MFA, device binding, and adaptive challenges while automating infrastructure with IaC and CI/CD pipelines. This remote-first role offers strong health benefits and equity.