Senior Software Engineer, Backend (Consumer Authentication Platform)

Affirm, Inc.; Canada; Remote; CAD 153,000 - 213,000; Full time

Benefits offered by this job

100% health coverage for you and your–

Monthly tech setup stipends

Flexible time off and holidays

Employee stock purchase plan (ESPP)

Job summary

Affim seeks a Senior Software Engineer for its Consumer Authentication Platform. You’ll lead major authentication initiatives, shaping architecture and delivering secure, scalable sign-in, session management, and identity federation capabilities across products and geographies.

You’ll collaborate with Product, Security, Fraud, and Data teams to translate complex requirements into pragmatic designs, while mentoring peers and driving best practices in code quality and reliability.

Qualifications

• 4+ years designing, developing, and launching backend systems at scale.
• Experience building highly available distributed systems and services.
• Proficiency in modern programming languages and secure design patterns.

Responsibilities

• Own the technical design and delivery of authentication platform capabilities from requirements to production.
• Build secure, highly available systems for sign-in, session management, and account recovery.
• Collaborate with product, security, and analytics teams to balance risks and deliverables.
• Translate security and regulatory requirements into pragmatic technical designs.
• Identify and solve project, security, and reliability issues proactively.
• Create metrics and support on-call efforts to ensure service reliability.
• Set and improve code review and design standards across the team.
• Mentor engineers through reviews and hands-on collaboration.
• Communicate decisions and trade-offs to both engineering and non-engineering audiences.

Skills

Backend design and development

Distributed systems

Security & authentication

Cross-functional collaboration

Code reviews & mentoring

Communication

Education

Bachelor's degree or equivalent practical experience

BS in Computer Science or related field

Tools

AWS

MySQL

Kubernetes

OAuth 2.0

OpenID Connect

WebAuthn

JWTs

Job description

At Affim, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.

The Consumer Authentication Platform team is looking for a passionate Senior Software Engineer to help build the secure, reliable, and seamless authentication experiences that connect millions of consumers with Affim’s financial products.

Authentication is the front door to Affim. Our systems power critical consumer journeys (including sign-up, sign-in, account recovery, checkout authentication, step-up challenges, session management, and connected merchant experiences) across thousands of merchants and multiple countries. We build foundational capabilities such as authentication factors, identity federation, session and authorization services, and risk-based authentication that protect consumers while minimizing unnecessary friction. We work closely with Product, Security, Fraud, Identity, Analytics, Compliance, Data Science, and a wide range of engineering teams to both leverage existing systems and build new systems. This role requires a high level of technical capability, strong cross-functional communication, and a creative mindset. Our work needs to be secure, reliable, correct, scalable, and extensible. Our job is to build an authentication platform that balances security, regulatory requirements, fraud prevention, customer experience, and business growth.

As a senior engineer, you will lead significant technical initiatives, influence the architecture and evolution of the platform, and help the team deliver secure authentication capabilities that can be reused across products, merchants, and geographies.

What You’ll Do

• You will own the technical design and delivery of significant authentication platform capabilities, leading projects from early requirements and architecture through implementation, rollout, and ongoing operation.
• You will build secure, highly available systems that support consumer sign-in, authentication factors, account recovery, step-up authentication, session management, authorization, and identity federation.
• You will support your peers and stakeholders in the product development lifecycle by collaborating with product management, Security, Fraud, Compliance, design, and analytics; participating in ideation; articulating technical constraints; and partnering on decisions that properly consider risks and trade-offs.
• You will translate security, regulatory, fraud, and customer-experience requirements into pragmatic technical designs that appropriately balance risk, friction, complexity, and delivery speed.
• You will proactively identify project, process, technology, security, reliability, or business issues, advocate for them, and lead in solving them.
• You will support the operations and availability of your team’s artifacts by creating and monitoring metrics, escalating when needed, and supporting “keep the lights on,” and on-call efforts.
• You will foster a culture of quality, security, and ownership on your team by setting or improving code review and design standards and advocating for them beyond your team through your writing and tech talks.
• You will help develop talent on your team by providing feedback and guidance, mentoring other engineers through design reviews and hands‑on collaboration, and leading by example.
• You will clearly communicate technical decisions, constraints, risks, and trade-offs to engineering and non‑engineering audiences through design documents, reviews, and technical discussions. You will lead the investigation and resolution of complex production issues and identify systemic improvements that prevent recurrence.

What We Look For

• You have 4+ years of experience designing, developing, and launching backend systems at scale using languages like Python, Kotlin, Java, or another comparable modern programming language.
• You have a track record of developing highly available distributed systems using technologies like AWS, MySQL, and Kubernetes, as well as relational databases, event‑driven architectures, and RPC or API frameworks.
• You have experience defining a technical plan for the delivery of a significant feature or system component with an elegant, secure, simple, and extensible design. You write high‑quality code that is easily understood and used by others.
• You are proficient at making significant changes in a large codebase and have developed a suite of tools and practices that enable you and your team to do so safely, including testing strategies, migration plans, and controlled rollouts.
• Your experience demonstrates that you take ownership of your growth, proactively seeking feedback from your team, manager, and stakeholders, while helping other engineers grow through mentorship and technical leadership.
• You have strong verbal and written communication skills that support effective collaboration with our global engineering team and cross‑functional partners.
• This position requires either equivalent practical experience or a bachelor’s degree in a related field.
• Familiarity with standards and protocols such as OAuth 2.0, OpenID Connect, WebAuthn/passkeys, FIDO2, JWTs, and public‑key cryptography. Knowledge of security and assurance frameworks such as the NIST Digital Identity Guidelines or PCI DSS.
• Experience designing session‑management, token‑issuance, account‑recovery, or multi‑factor authentication systems. Familiarity with risk‑based or adaptive authentication and the interaction between identity, security, compliance, and fraud controls.

This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan

Pay Grade - N

Equity Grade - 6

Employees new to affirm typically come in at the start of the pay range. Affim focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job‑related skills.

Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.) CAN base pay range per year: $153,000 - $213,000 CAD

Remote‑first with flexibility built in

Affim is proud to be a remote‑first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in‑person work at an Affim office, and a few are office‑based due to the nature of the work. All new hires will be invited to attend an in‑person onboarding experience.

Benefits designed for you

• Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
• Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
• Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
• Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affim stock at a discount.

We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.

For positions based in San Francisco or Los Angeles: Affim considers qualified applicants with arrest and conviction records, as required by law.