Remote-First CIAM Security Engineer II

Affirm, Inc.; Raleigh (NC); Remote; USD 146,000 - 206,000; Full time

Benefits offered by this job

100% dependent health coverage

Tech stipend for setup

Flexible time off

Employee stock purchase plan (ESPP)

Job summary

Affirm is building the next generation of customer identity and authentication. This hands-on role sits in Information Security, contributing to core CIAM capabilities that protect customers and enable growth.

You will build and maintain backend services powering registration, login, authorization, and account lifecycle for B2C and B2B experiences, collaborating with engineers and partner teams to deliver secure identity features with reliability and operational rigor.

Qualifications

• Proficiency in Python or Kotlin with ability to write, test, and debug code.
• Solid understanding of backend development: APIs, data structures, databases, and version control.
• Curiosity about authentication and secure customer experiences; CIAM experience is a plus.
• Problem-solving mindset and willingness to learn through mentorship and code review.
• Strong communication and collaboration with engineering, product, and security teams.

Responsibilities

• Build and ship customer-facing authentication features—from smoother login experiences to MFA, step‑up authentication, and device binding.
• Develop backend services and APIs in Python or Kotlin, turning requirements into working software.
• Work with identity technologies like Okta, Auth0, and ForgeRock and integrate them with apps.
• Guide features through the SDLC: design review, readable code, tests, and production deployment.
• Debug services, improve reliability, and use logs and metrics to monitor production behavior.
• Collaborate with partners and grow secure development skills in authentication.

Skills

Python

Kotlin

Backend APIs

Education

Bachelor’s degree in a related field

Tools

Okta

Auth0

ForgeRock

Job description

Affirm is building the next generation of customer identity and authentication. This hands-on role sits in Information Security, contributing to core CIAM capabilities that protect customers and enable growth.

You will build and maintain backend services powering registration, login, authorization, and account lifecycle for B2C and B2B experiences, collaborating with engineers and partner teams to deliver secure identity features with reliability and operational rigor.