Remote CIAM Security Engineer — Scale & Secure Identities

Affirm; United States; Remote; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health coverage for dependents

Remote-first culture

EspP stock purchase program

Job summary

Affirm is seeking an experienced backend engineer to design and ship CIAM capabilities that power registration, login, and account lifecycle for B2C and B2B experiences.

You will build and operate backend services in Python and Kotlin with a strong emphasis on security, reliability, and scalability across high-scale environments. This role is remote-first within the United States, with occasional office needs.

Qualifications

• Experience designing and implementing CIAM systems beyond basic configuration.
• 5+ years of professional backend software engineering experience.
• Strong production experience in Python or a similar backend language.
• Experience designing APIs, automation frameworks, and distributed systems.
• Hands-on experience building and maintaining CI/CD pipelines.
• Experience with cloud-native development, preferably AWS.
• Hands-on experience extending CIAM platforms using custom code and APIs.
• Solid understanding of backend and distributed systems fundamentals.
• Experience with Infrastructure as Code and automation tools like Terraform, plus CI/CD pipelines.
• Strong security fundamentals in engineering, including MFA and privacy by design.

Responsibilities

• Design, build, and operate core CIAM backend services for registration, authentication, authorization, and profile management.
• Implement and extend identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Automate CIAM infrastructure and deployments via Infrastructure as Code and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection.

Skills

CIAM design

Backend development

Python

Kotlin

AWS

Security fundamentals

API design

Tools

Kubernetes

Terraform

GitHub workflows

Job description

Affirm is seeking an experienced backend engineer to design and ship CIAM capabilities that power registration, login, and account lifecycle for B2C and B2B experiences.

You will build and operate backend services in Python and Kotlin with a strong emphasis on security, reliability, and scalability across high-scale environments. This role is remote-first within the United States, with occasional office needs.