Senior Remote CIAM Security Engineer

Affirm; Kelowna; On-site; CAD 181,000 - 241,000; Full time

Benefits offered by this job

Health coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is seeking a hands-on backend engineer for CIAM within Information Security. You will design, build, and operate core CIAM services powering registration, authentication, authorization, and account lifecycle for B2C and B2B customers, emphasising security, reliability, and scalability.

You’ll work across teams to implement OAuth 2.0, OIDC, SAML and SCIM, with Python or Kotlin, AWS, and CI/CD automation.

Qualifications

• 7+ years of backend design, development and deployment experience at scale.
• Strong experience with CIAM concepts and security
• Hands-on with Python or Kotlin and distributed systems
• Experience with OAuth 2.0, OIDC, SAML, SCIM beyond basics
• Proficiency in AWS, databases, and microservices architecture
• Familiarity with CI/CD tooling and IaC.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and profile management.
• Implement and extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop backend APIs in Python/Kotlin exposed to web, mobile, and partner apps.
• Automate CIAM infrastructure and deployments using IaC and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance and security.

Skills

CIAM design

Python

Kotlin

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

CI/CD

Infrastructure as Code

Terraform

Security fundamentals

Cursor

Tools

Cursor

GitHub Actions

Buildkite

Terraform

Job description

Affirm is seeking a hands-on backend engineer for CIAM within Information Security. You will design, build, and operate core CIAM services powering registration, authentication, authorization, and account lifecycle for B2C and B2B customers, emphasising security, reliability, and scalability.

You’ll work across teams to implement OAuth 2.0, OIDC, SAML and SCIM, with Python or Kotlin, AWS, and CI/CD automation.