Remote CIAM Security Engineer - Scale Identity Systems

Affirm; Portland (OR); On-site; USD 230,000 - 290,000; Full time

Benefits offered by this job

Health coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is hiring for a senior CIAM-focused backend engineer to design, build, and operate core identity services powering registration, login, and account lifecycle across B2C and B2B platforms. You will implement standards like OAuth 2.0, OIDC, SAML, and SCIM with scalable patterns and secure integrations.

You will develop Python and Kotlin APIs, integrate with data stores, fraud signals, and downstream systems, and own end-to-end authentication flows including MFA and adaptive auth in a

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale using languages like Python or Kotlin.

Responsibilities

• Design, build, and operate core CIAM backend services that support registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms.
• Implement and extend identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code, ensuring correctness, scalability, and clean integration patterns.
• Develop backend APIs and services in Python and Kotlin that expose identity capabilities to web, mobile, and partner applications.
• Integrate CIAM platforms with internal systems, including user data stores, messaging, fraud signals, and downstream customer platforms.
• Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent, and adaptive authentication logic.
• Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines, treating identity as a core platform service.
• Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection in high-scale environments.

Skills

Python

Kotlin

OAuth 2.0

OIDC

SAML

SCIM

AWS

Kubernetes

API design

Security fundamentals

Tools

MySQL

Spark

Terraform

CI/CD tools

Buildkite

GitHub workflows

Job description

Affirm is hiring for a senior CIAM-focused backend engineer to design, build, and operate core identity services powering registration, login, and account lifecycle across B2C and B2B platforms. You will implement standards like OAuth 2.0, OIDC, SAML, and SCIM with scalable patterns and secure integrations.

You will develop Python and Kotlin APIs, integrate with data stores, fraud signals, and downstream systems, and own end-to-end authentication flows including MFA and adaptive auth in a