Remote CIAM Backend Engineer – Scale & Security

Affirm; Chicago (IL); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health care coverage for you and your

Flexible Spending Wallets

Time off for vacation and holidays

ESPP

Job summary

Affirm, a leading fintech company, seeks an experienced CIAM-focused backend engineer to design and ship core customer identity capabilities for B2C and B2B systems. You will build scalable services that power registration, login, authorization, and account lifecycle with strong security and reliability.

You will implement identity standards (OAuth 2.0, OIDC, SAML, SCIM) and extend CIAM platforms via code, hooks, and APIs, while collaborating with partner teams and ensuring secure, observable

Qualifications

• 7+ years designing backend systems at scale
• Deep hands-on CIAM knowledge beyond basics
• Proficient in Python or Kotlin backend development
• Strong API design, automation frameworks and distributed systems
• Experience with CI/CD pipelines and GitHub workflows

Responsibilities

• Design, build, and operate CIAM backend services for B2C and B2B
• Implement OAuth 2.0, OIDC, SAML, and SCIM in code
• Develop backend APIs exposing identity capabilities to web/mobile/partners
• Integrate CIAM platforms with data stores, messaging and fraud signals
• Own authentication and account flows including MFA and adaptive auth
• Automate CIAM infrastructure and deployments with IaC and CI/CD
• Monitor and optimize CIAM services for performance and security

Skills

CIAM design

OAuth 2.0

OIDC

SAML

SCIM

Python

Kotlin

AWS

Distributed systems

Kubernetes

APIs

Security fundamentals

Tools

Okta

Auth0

Ping Identity

ForgeRock

Azure AD B2C

Job description

Affirm, a leading fintech company, seeks an experienced CIAM-focused backend engineer to design and ship core customer identity capabilities for B2C and B2B systems. You will build scalable services that power registration, login, authorization, and account lifecycle with strong security and reliability.

You will implement identity standards (OAuth 2.0, OIDC, SAML, SCIM) and extend CIAM platforms via code, hooks, and APIs, while collaborating with partner teams and ensuring secure, observable