Senior Software Engineer, Backend (Consumer Authentication Platform)

Affirm; Victoria; Remote; CAD 153,000 - 213,000; Full time

Benefits offered by this job

Health coverage and benefits

Tech stipends

Flexible time off

Employee stock purchase plan

Job summary

Affirm is seeking a Senior Software Engineer for the Consumer Authentication Platform to build secure, scalable authentication experiences across products and geographies. You will own design and delivery of authentication capabilities, work with cross-functional partners, and help balance security with user experience while delivering reliable systems at scale.

As a senior engineer, you will lead major technical initiatives, influence platform evolution, and mentor other engineers while

Qualifications

• 4+ years of experience designing, developing, and launching backend systems at scale using modern languages.
• Experience building highly available distributed systems with AWS, MySQL, and Kubernetes.
• Ability to define a technical plan and deliver secure, extensible designs.
• Strong coding practices with testable, maintainable code.
• Proactive ownership, mentorship, and cross-functional collaboration.

Responsibilities

• Own the technical design and delivery of authentication platform capabilities from requirements to rollout.
• Build secure, highly available systems for sign-in, account recovery, and session management.
• Collaborate with product, security, compliance, and analytics teams to balance risk and speed.
• Translate security and regulatory requirements into pragmatic technical designs.
• Lead efforts to identify and resolve production issues and improve reliability.
• Write clear design docs and communicate decisions to both engineers and non-engineers.

Skills

Backend design

Distributed systems

APIs

Security concepts

Communication

Education

Bachelor's degree or equivalent

Tools

AWS

MySQL

Kubernetes

Relational databases

RPC/APIs

Job description

At affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.

The Consumer Authentication Platform team is looking for a passionate Senior Software Engineer to help build the secure, reliable, and seamless authentication experiences that connect millions of consumers with affirm’s financial products.

Authentication is the front door to affirm. Our systems power critical consumer journeys (including sign-up, sign-in, account recovery, checkout authentication, step-up challenges, session management, and connected merchant experiences) across thousands of merchants and multiple countries. We build foundational capabilities such as authentication factors, identity federation, session and authorization services, and risk-based authentication that protect consumers while minimizing unnecessary friction. We work closely with Product, Security, Fraud, Identity, Analytics, Compliance, Data Science, and a wide range of engineering teams to both leverage existing systems and build new systems. This role requires a high level of technical capability, strong cross-functional communication, and a creative mindset. Our work needs to be secure, reliable, correct, scalable, and extensible. Our job is to build an authentication platform that balances security, regulatory requirements, fraud prevention, customer experience, and business growth.

As a senior engineer, you will lead significant technical initiatives, influence the architecture and evolution of the platform, and help the team deliver secure authentication capabilities that can be reused across products, merchants, and geographies.

What You’ll Do

• You will own the technical design and delivery of significant authentication platform capabilities, leading projects from early requirements and architecture through implementation, rollout, and ongoing operation.
• You will build secure, highly available systems that support consumer sign-in, authentication factors, account recovery, step-up authentication, session management, authorization, and identity federation.
• You will support your peers and stakeholders in the product development lifecycle by collaborating with product management, Security, Fraud, Compliance, design, and analytics; participating in ideation; articulating technical constraints; and partnering on decisions that properly consider risks and trade-offs.
• You will translate security, regulatory, fraud, and customer-experience requirements into pragmatic technical designs that appropriately balance risk, friction, complexity, and delivery speed.
• You will proactively identify project, process, technology, security, reliability, or business issues, advocate for them, and lead in solving them.
• You will support the operations and availability of your team’s artifacts by creating and monitoring metrics, escalating when needed, and supporting “keep the lights on,” and on-call efforts.
• You will foster a culture of quality, security, and ownership on your team by setting or improving code review and design standards and advocating for them beyond your team through your writing and tech talks.
• You will help develop talent on your team by providing feedback and guidance, mentoring other engineers through design reviews and hands‑on collaboration, and leading by example.
• You will clearly communicate technical decisions, constraints, risks, and trade-offs to engineering and non-engineering audiences through design documents, reviews, and technical discussions. You will lead the investigation and resolution of complex production issues and identify systemic improvements that prevent recurrence.

What We Look For

• You have 4+ years of experience designing, developing, and launching backend systems at scale using languages like Python, Kotlin, Java, or another comparable modern programming language.
• You have a track record of developing highly available distributed systems using technologies like AWS, MySQL, and Kubernetes, as well as relational databases, event-driven architectures, and RPC or API frameworks.
• You have experience defining a technical plan for the delivery of a significant feature or system component with an elegant, secure, simple, and extensible design. You write high-quality code that is easily understood and used by others.
• You are proficient at making significant changes in a large codebase and have developed a suite of tools and practices that enable you and your team to do so safely, including testing strategies, migration plans, and controlled rollouts.
• Your experience demonstrates that you take ownership of your growth, proactively seeking feedback from your team, manager, and stakeholders, while helping other engineers grow through mentorship and technical leadership.
• You have strong verbal and written communication skills that support effective collaboration with our global engineering team and cross-functional partners.
• This position requires either equivalent practical experience or a bachelor’s degree in a related field.
• Familiarity with standards and protocols such as OAuth 2.0, OpenID Connect, WebAuthn/passkeys, FIDO2, JWTs, and public-key cryptography. Knowledge of security and assurance frameworks such as the NIST Digital Identity Guidelines or PCI DSS.
• Experience designing session-management, token-issuance, account-recovery, or multi-factor authentication systems. Familiarity with risk-based or adaptive authentication and the interaction between identity, security, compliance, and fraud controls.

This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.

Pay Grade - N

Equity Grade - 6

Employees new to affirm typically come in at the start of the pay range. Affi… focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.

Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents).

CAN base pay range per year: $153,000 - $213,000 CAD

Remote-first with flexibility built in

Affirm is proud to be a remote-first company. Most roles can be done from almost anywhere within the country of employment. Some positions may occasionally require in-person work at an affirm office, and a few are office-based due to the nature of the work. All new hires will be invited to attend an in-person onboarding experience.

Benefits Designed For You

• Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
• Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
• Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
• Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy affirm stock at a discount.

We’re committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we’re happy to help.

For positions based in San Francisco or Los Angeles: affirm considers qualified applicants with arrest and conviction records, as required by law.