Remote CIAM Security Engineer - Backend Identity & Auth

Affirm; Washington (District of Columbia); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Equity

Remote-first

Health coverage for dependents

Tech stipend

100% subsidized medical coverage

Dental and vision for dependents

Job summary

Affirm is hiring a hands-on backend engineer within Information Security to design and ship core CIAM capabilities that protect customers and enable growth. You will build and operate backend services powering registration, login, authorization, and account lifecycle for B2C and B2B experiences.

Responsibilities include implementing identity standards, building APIs in Python/Kotlin, and automating CIAM infrastructure with IaC and CI/CD.

Qualifications

• 7+ years of backend design, development, and launch at scale.
• Deep expertise with OAuth 2.0, OIDC, SAML, SCIM beyond configuration.
• Proficient in Python or Kotlin and building distributed systems.
• Experience delivering major features with a clear technical plan and execution.
• Strong collaboration and communication across global teams.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, and account lifecycle.
• Implement and extend identity standards in code with scalable patterns.
• Develop backend APIs for web, mobile, and partner apps.
• Automate infrastructure with IaC and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance and security.

Skills

CIAM experience

OAuth 2.0 / OIDC / SAML / SCIM

Python or Kotlin backend

Distributed systems design

CI/CD automation

Tools

AWS

MySQL

Spark

Kubernetes

Terraform

Job description

Affirm is hiring a hands-on backend engineer within Information Security to design and ship core CIAM capabilities that protect customers and enable growth. You will build and operate backend services powering registration, login, authorization, and account lifecycle for B2C and B2B experiences.

Responsibilities include implementing identity standards, building APIs in Python/Kotlin, and automating CIAM infrastructure with IaC and CI/CD.