Remote CIAM Backend Engineer

Affirm; Salt Lake City (UT); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Equity

Medical coverage for you and dependets

Stipends for health, tech spending

Remote-first

Job summary

Affirm is seeking a hands-on backend engineer in Information Security to design and ship CIAM capabilities for B2C and B2B experiences. You will build and operate backend services in Python and Kotlin that support registration, login, authorization, and account lifecycle flows, with strong emphasis on security, reliability, and scalability.

You will implement identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code, and collaborate with partner teams to deliver robust authentication

Qualifications

• 7+ years in backend system design and launch at scale.
• Strong knowledge of OAuth 2.0, OIDC, SAML and SCIM.
• Experience with AWS, MySQL, Spark and Kubernetes.
• Proven ability to ship features end-to-end with secure by design approach.

Responsibilities

• Design, build and operate CIAM backend services for registration, authentication and account lifecycle.
• Implement identity standards in code with secure integration patterns.
• Develop Python/Kotlin backends exposing APIs to web and mobile apps.
• Automate CI/CD pipelines and infrastructure as code.
• Monitor and optimize CIAM services for performance and abuse detection.

Skills

Backend design & scale

Python or Kotlin

OAuth 2.0 / OIDC / SAML / SCIM

Distributed systems

CI/CD pipelines

AWS

MySQL

Kubernetes

GitHub workflows

Tools

AWS

MySQL

Spark

Kubernetes

Okta

Auth0

Ping Identity

ForgeRock

Azure AD B2C

Terraform

Buildkite

GitHub

Job description

Affirm is seeking a hands-on backend engineer in Information Security to design and ship CIAM capabilities for B2C and B2B experiences. You will build and operate backend services in Python and Kotlin that support registration, login, authorization, and account lifecycle flows, with strong emphasis on security, reliability, and scalability.

You will implement identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code, and collaborate with partner teams to deliver robust authentication