CIAM Backend Engineer II — Remote-First, Equity

Affirm, Inc.; Washington (District of Columbia); Remote; USD 146,000 - 206,000; Full time

Benefits offered by this job

Health coverage 100% for you and your:

Tech stipends

Flexible time off

Employee stock purchase plan

Job summary

Affirm, Inc. is seeking a hands-on mid-level backend engineer in Information Security to build and maintain identity services handling registration, login, and account lifecycle for B2C and B2B experiences.

You will develop in Python or Kotlin, implement MFA and device binding, and work with Okta, Auth0, and ForgeRock to connect identity capabilities to web, mobile, and partner apps. Emphasis on security, reliability, and observability.

Qualifications

• Demonstrated ability to write, test, and debug software in Python or Kotlin through coursework or work experience.
• Foundational backend development knowledge: APIs, data structures, databases, version control.
• Interest in authentication mechanics and secure customer experiences; CIAM experience is a plus.
• Willingness to learn through mentorship and code reviews; good communication with teammates.

Responsibilities

• Build and ship customer-facing authentication features, from login to MFA and device binding.
• Develop backend services and APIs in Python or Kotlin for secure account access.
• Integrate identity capabilities with Okta, Auth0, ForgeRock across web, mobile, and partners.
• Participate in design, code reviews, tests, and production deployments with the team.
• Improve reliability by debugging services and using logs/metrics to monitor production behavior.

Skills

Python

Kotlin

Backend development

APIs

Testing

Security fundamentals

CI/CD

Education

Bachelor's degree or equivalent

Tools

Okta

Auth0

ForgeRock

CIAM platforms

Job description

Affirm, Inc. is seeking a hands-on mid-level backend engineer in Information Security to build and maintain identity services handling registration, login, and account lifecycle for B2C and B2B experiences.

You will develop in Python or Kotlin, implement MFA and device binding, and work with Okta, Auth0, and ForgeRock to connect identity capabilities to web, mobile, and partner apps. Emphasis on security, reliability, and observability.