Remote CIAM Backend Engineer - Scalable Identity & Security

Affirm; San Francisco (CA); On-site; USD 230,000 - 290,000; Full time

Benefits offered by this job

Health insurance

Equity

Remote-friendly

Job summary

Affirm is building the next generation of customer identity and authentication. This hands-on back-end role focuses on CIAM capabilities that power registration, login, and account lifecycle for B2C and B2B experiences, deployed across AWS and Kubernetes.

You will design, develop, and operate scalable CIAM services using Python or Kotlin, implement OAuth/OIDC/SAML/SCIM, and own secure authentication flows end-to-end in a remote-first environment across the US.

Qualifications

• 7+ years designing, developing and launching backend systems at scale.
• Strong knowledge of OAuth 2.0, OIDC, SAML, and SCIM beyond basics.
• Expertise in Python or Kotlin for backend services.

Responsibilities

• Design, build, and operate CIAM backend services for registration, auth, and profile management.
• Implement identity standards and secure, scalable integration patterns.
• Develop APIs and services for web, mobile, and partner apps.
• Automate infrastructure and CI/CD for CIAM as a platform service.

Skills

Backend design

Distributed systems

OAuth 2.0 / OIDC / SAML / SCIM

Python / Kotlin

AWS

GitHub workflows / Buildkite

Security fundamentals

Tools

Terraform

Kubernetes

Buildkite

GitHub Actions

Okta/Auth0 integration

MySQL

Spark

Job description

Affirm is building the next generation of customer identity and authentication. This hands-on back-end role focuses on CIAM capabilities that power registration, login, and account lifecycle for B2C and B2B experiences, deployed across AWS and Kubernetes.

You will design, develop, and operate scalable CIAM services using Python or Kotlin, implement OAuth/OIDC/SAML/SCIM, and own secure authentication flows end-to-end in a remote-first environment across the US.