Remote CIAM Backend Engineer II

Affirm, Inc.; Pittsburgh (Allegheny County); Remote; USD 146,000 - 206,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Tech setup stipends

Flexible time off

Employee stock purchase plan (ESPP)

Job summary

Affirm, Inc. is hiring for a hands-on backend engineer in Information Security focused on CIAM capabilities. You will help build subscription/reservation of identity services, covering registration, login, authorization, and account lifecycle across B2C and B2B experiences.

You’ll work with engineers and partners to deliver secure, scalable authentication features, while emphasizing reliability and operational excellence.

Qualifications

• Willingness to write, test, and debug software in Python or Kotlin.
• Strong foundation in backend development: APIs, data structures, databases, and version control.
• Interest in security, authentication, and CIAM concepts; prior CIAM experience is a plus.

Responsibilities

• Build and ship customer-facing authentication features, including MFA and device binding.
• Develop backend services and APIs in Python or Kotlin to secure account access.
• Integrate identity platforms (Okta/Auth0/ForgeRock) with web, mobile, and partner apps.
• Contribute to design reviews, write clean code, and run automated tests through CI/CD.
• Debug services, improve reliability, and use logs/metrics to understand production behavior.
• Collaborate with engineering, product, and security teams to advance secure development practices.

Skills

Python

Kotlin

APIs

Databases

Version control

Education

Bachelor’s degree or equivalent

Tools

Okta

Auth0

ForgeRock

Job description

Affirm, Inc. is hiring for a hands-on backend engineer in Information Security focused on CIAM capabilities. You will help build subscription/reservation of identity services, covering registration, login, authorization, and account lifecycle across B2C and B2B experiences.

You’ll work with engineers and partners to deliver secure, scalable authentication features, while emphasizing reliability and operational excellence.