Remote CIAM Security Engineer (Backend)

Affirm; Raleigh (NC); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is a remote-first company building secure CIAM backends for registering, authenticating and authorizing users across B2C and B2B platforms.

You will design, implement, and operate scalable identity services using Python and Kotlin, with strong emphasis on security, reliability, and modern cloud practices. Expect collaboration with global teams and a focus on high-scale operation.

Qualifications

• 7+ years of backend experience in design, development and launch of large-scale systems.
• Strong production experience in Python or Kotlin and building backend APIs.
• Hands-on experience with CI/CD pipelines and cloud-native development (AWS).
• Expertise with OAuth 2.0, OIDC, SAML, SCIM and identity integration patterns.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, and account lifecycle across B2C and B2B.
• Implement and extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Integrate CIAM with internal systems, data stores, messaging, and downstream platforms.
• Own secure authentication flows including MFA, step-up and device binding.
• Automate CIAM infrastructure with IaC and CI/CD pipelines; monitor and optimize performance and resilience.

Skills

CIAM design

Python

Kotlin

Distributed systems

AWS

OAuth 2.0 / OIDC / SAML

APIs design

Security fundamentals

MFA

Communication

Tools

AWS

MySQL

Spark

Kubernetes

GitHub

Buildkite

Terraform

Okta

Auth0

Ping Identity

Job description

Affirm is a remote-first company building secure CIAM backends for registering, authenticating and authorizing users across B2C and B2B platforms.

You will design, implement, and operate scalable identity services using Python and Kotlin, with strong emphasis on security, reliability, and modern cloud practices. Expect collaboration with global teams and a focus on high-scale operation.