Senior CIAM Security Engineer — Remote

Affirm; Saskatoon; On-site; CAD 181,000 - 241,000; Full time

Benefits offered by this job

Health insurance for you and dependets

Tech & wellness stipends

Paid vacation & holidays

Employee stock purchase plan (ESPP)

Job summary

Affirm is reinventing credit with a remote‑first approach, building secure CIAM capabilities powering registration, login, and account lifecycle for B2C and B2B. You will design, implement, and operate backend services with strong security, reliability, and operational rigor.

You will work on core identity features, integrate with Okta/Auth0 and other CIAM platforms, and ensure scalable patterns across high‑scale environments with IaC and CI/CD pipelines.

Qualifications

• Strong hands-on CIAM design, with OAuth 2.0/OIDC/SAML/SCIM beyond basics.
• 5+ years of backend software engineering experience.
• Strong production experience in Python or a similar backend language.
• Experience designing APIs, automation frameworks, and distributed systems.
• Hands-on CI/CD pipelines and GitHub-based workflows.

Responsibilities

• Design, build, and operate core CIAM backend services for registration, authentication, and account lifecycle across B2C and B2B.
• Implement and extend identity standards in code for scalability and clean integration patterns.
• Develop Python and Kotlin APIs exposing identity capabilities to web, mobile, and partner apps.
• Integrate CIAM platforms with internal data stores, messaging, fraud signals, and downstream systems.
• Own secure authentication flows including MFA, device binding, consent, and adaptive auth.

Skills

Python

Kotlin

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

APIs

CI/CD

Terraform

GitHub workflows

Tools

Cursor

Okta

Auth0

Ping Identity

ForgeRock

Azure AD B2C

Job description

Affirm is reinventing credit with a remote‑first approach, building secure CIAM capabilities powering registration, login, and account lifecycle for B2C and B2B. You will design, implement, and operate backend services with strong security, reliability, and operational rigor.

You will work on core identity features, integrate with Okta/Auth0 and other CIAM platforms, and ensure scalable patterns across high‑scale environments with IaC and CI/CD pipelines.