Remote CIAM Security Engineer — Scale Identity Platform

Affirm; Atlanta (GA); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health care coverage

ESPP - stock purchase plan

Time off

Flexible Spending Wallets

Job summary

Affirm is seeking a hands-on backend engineer to design and ship core CIAM capabilities for registration, login, authorization, and lifecycle management across B2C and B2B experiences. You will implement identity standards, build secure APIs, and operate distributed services at scale in AWS.

You’ll collaborate with partner teams, own end-to-end authentication flows including MFA, and automate infrastructure with code and CI/CD pipelines in a remote-first environment.

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale.
• Strong backend experience in Python or Kotlin.
• Proven track record in building highly available distributed systems on AWS with MySQL, Spark and Kubernetes.
• Experience implementing OAuth 2.0, OIDC, SAML, SCIM in code.
• Experience designing APIs, automation frameworks and distributed systems.
• Hands-on CI/CD experience with GitHub workflows and Buildkite; cloud-native development on AWS.
• Ability to integrate CIAM platforms with internal systems and operate secure authentication flows.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and profile management for B2C/B2B.
• Implement and extend CIAM identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Integrate CIAM with internal data stores, messaging, and fraud signals.
• Own secure authentication and account flows end-to-end, including MFA and adaptive authentication.
• Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection.

Skills

Python

Kotlin

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

APIs

Security fundamentals

CI/CD

Terraform

Buildkite

GitHub workflows

CIAM integrations (Okta/Auth0/Azure AD

Tools

Terraform

Buildkite

GitHub

Job description

Affirm is seeking a hands-on backend engineer to design and ship core CIAM capabilities for registration, login, authorization, and lifecycle management across B2C and B2B experiences. You will implement identity standards, build secure APIs, and operate distributed services at scale in AWS.

You’ll collaborate with partner teams, own end-to-end authentication flows including MFA, and automate infrastructure with code and CI/CD pipelines in a remote-first environment.