Remote Senior CIAM Backend Engineer

Affirm; St. Louis (MO); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health coverage for you and dependents

ESPP stock purchase plan

Tech and lifestyle stipends

Generous time off

Job summary

Affirm is building the next generation of CIAM backend services to support registration, login, authorization and account lifecycle for B2C and B2B platforms. You will ship backend systems at scale using Python or Kotlin, with strong security, reliability, and operational rigor.

You will own secure authentication, MFA, device binding, and adaptive authentication while integrating CIAM platforms with internal systems and partner applications.

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale.
• Experience with AWS, MySQL, Spark, and Kubernetes in production.
• Strong understanding of CIAM standards (OAuth 2.0, OIDC, SAML, SCIM).
• Delivery of major features and components with clear technical plans.
• Proficient in Python or Kotlin for backend services.
• Experience integrating CIAM with data stores, messaging, and downstream systems.
• Knowledge of secure authentication, MFA, and adaptive authentication.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, and account lifecycle for B2C/B2B.
• Implement and extend CIAM standards (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop backend APIs and services in Python and Kotlin for web, mobile, and partner apps.
• Integrate CIAM platforms with internal systems (data stores, messaging, fraud signals).
• Own end-to-end secure authentication flows including MFA and device binding.
• Automate CIAM infrastructure with IaC and CI/CD pipelines.
• Monitor and optimize CIAM services for performance, resilience, and abuse detection.

Skills

Backend design

Python

Kotlin

AWS

MySQL

Spark

Kubernetes

CIAM

OAuth 2.0

OIDC

SAML

SCIM

API design

CI/CD

Infrastructure as Code

Security fundamentals

GitHub workflows

Buildkite

Terraform

Ledger/logging/observability

Tools

AWS

Kubernetes

Spark

MySQL

Terraform

Buildkite

GitHub

Job description

Affirm is building the next generation of CIAM backend services to support registration, login, authorization and account lifecycle for B2C and B2B platforms. You will ship backend systems at scale using Python or Kotlin, with strong security, reliability, and operational rigor.

You will own secure authentication, MFA, device binding, and adaptive authentication while integrating CIAM platforms with internal systems and partner applications.