Senior Software Engineer (Backend, Consumer Authentication Platform)

Affirm; Ottawa; Remote; CAD 199,000 - 256,000; Full time

Job summary

Affirm is seeking a Senior Software Engineer for the Consumer Authentication Platform. The role focuses on building secure, reliable authentication experiences across millions of users and merchants, spanning sign-up, sign-in, account recovery, and step-up challenges.

You will lead architectural initiatives and deliver reusable authentication capabilities across geographies. The ideal candidate has 4+ years designing backend systems at scale, deep knowledge of OAuth/OpenID and related security

Qualifications

• Experience designing session-management, token-issuance, account-recovery, or multi-factor authentication systems.
• Familiarity with risk-based or adaptive authentication and the interaction between identity, security, compliance, and fraud controls.
• Owns growth mindset and mentorship within the team.
• Knowledge of OAuth 2.0, OpenID Connect, WebAuthn, FIDO2, JWTs, and public-key cryptography.

Responsibilities

• Lead significant technical initiatives and influence platform architecture.
• Deliver secure authentication capabilities reusable across products, merchants, and geographies.
• Collaborate with product, Security, Fraud, Identity, Analytics, Compliance, and Data Science teams.
• Build secure, highly available backend systems at scale.

Skills

Backend design

Distributed systems

Security

Mentorship

Education

Bachelor's degree or equivalent

Tools

AWS

MySQL

Kubernetes

Job description

• The Consumer Authentication Platform team is looking for a passionate Senior Software Engineer to help build the secure, reliable, and seamless authentication experiences that connect millions of consumers with affirm’s financial products
• Authentication is the front door to affirm
• Our systems power critical consumer journeys (including sign-up, sign-in, account recovery, checkout authentication, step-up challenges, session management, and connected merchant experiences) across thousands of merchants and multiple countries
• We build foundational capabilities such as authentication factors, identity federation, session and authorization services, and risk-based authentication that protect consumers while minimizing unnecessary friction
• We work closely with Product, Security, Fraud, Identity, Analytics, Compliance, Data Science, and a wide range of engineering teams to both leverage existing systems and build new systems
• This role requires a high level of technical capability, strong cross-functional communication, and a creative mindset
• Our work needs to be secure, reliable, correct, scalable, and extensible
• Our job is to build an authentication platform that balances security, regulatory requirements, fraud prevention, customer experience, and business growth
• As a senior engineer, you will lead significant technical initiatives, influence the architecture and evolution of the platform, and help the team deliver secure authentication capabilities that can be reused across products, merchants, and geographies
• You will own the technical design and delivery of significant authentication platform capabilities, leading projects from early requirements and architecture through implementation, rollout, and ongoing operation
• You will build secure, highly available systems that support consumer sign-in, authentication factors, account recovery, step-up authentication, session management, authorization, and identity federation
• You will support your peers and stakeholders in the product development lifecycle by collaborating with product management, Security, Fraud, Compliance, design, and analytics; participating in ideation; articulating technical constraints; and partnering on decisions that properly consider risks and trade-offs
• You will translate security, regulatory, fraud, and customer-experience requirements into pragmatic technical designs that appropriately balance risk, friction, complexity, and delivery speed
• You will proactively identify project, process, technology, security, reliability, or business issues, advocate for them, and lead in solving them
• You will support the operations and availability of your team’s artifacts by creating and monitoring metrics, escalating when needed, and supporting “keep the lights on,” and on-call efforts
• You will foster a culture of quality, security, and ownership on your team by setting or improving code review and design standards and advocating for them beyond your team through your writing and tech talks
• You will help develop talent on your team by providing feedback and guidance, mentoring other engineers through design reviews and hands-on collaboration, and leading by example
• You will clearly communicate technical decisions, constraints, risks, and trade-offs to engineering and non-engineering audiences through design documents, reviews, and technical discussions. You will lead the investigation and resolution of complex production issues and identify systemic improvements that prevent recurrence

Benefits

• Compensation: We have a simple, flexible, and transparent remote-first compensation structure so you can make the best decisions for yourself and your family
• Spending Wallets: Access tech, food, lifestyle, and family planning wallets for your expenses
• Supportive Communities: Get involved with our employee resource groups and community groups
• Remote-first Workforce: If your role is remote, you can set up shop anywhere in your home country
• Generous Time Off: Take the time you need when life happens
• Health Benefits: Get a plan that fits your needs
• Mental Healthcare: Take care of your mind with great mental health programs
• Parental Leave: Birth and non-birth parents get 18 weeks’ paid leave. Plus, a 4-week return-to-work transition program, at full base pay
• Away Days: We offer 20 company-wide paid days off—which help our teams collectively pause to recharge
• Learning & Development: Engage in exciting learning programs to level up your growth

You are proficient at making significant changes in a large codebase and have developed a suite of tools and practices that enable you and your team to do so safely, including testing strategies, migration plans, and controlled rollouts Experience designing session-management, token-issuance, account-recovery, or multi-factor authentication systems. Familiarity with risk-based or adaptive authentication and the interaction between identity, security, compliance, and fraud controls This position requires either equivalent practical experience or a bachelor’s degree in a related field Your experience demonstrates that you take ownership of your growth, proactively seeking feedback from your team, manager, and stakeholders, while helping other engineers grow through mentorship and technical leadership Familiarity with standards and protocols such as OAuth 2.0, OpenID Connect, WebAuthn/passkeys, FIDO2, JWTs, and public-key cryptography. Knowledge of security and assurance frameworks such as the NIST Digital Identity Guidelines or PCI DSS You have a track record of developing highly available distributed systems using technologies like AWS, MySQL, and Kubernetes, as well as relational databases, event-driven architectures, and RPC or API frameworks You have 4+ years of experience designing, developing, and launching backend systems at scale using languages like Python, Kotlin, Java, or another comparable modern programming language You have experience defining a technical plan for the delivery of a significant feature or system component with an elegant, secure, simple, and extensible design. You write high-quality code that is easily understood and used by others You have strong verbal and written communication skills that support effective collaboration with our global engineering team and cross-functional partners