Remote Senior CIAM Security Engineer

Affirm; San Diego (CA); On-site; USD 230,000 - 290,000; Full time

Benefits offered by this job

Health coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is hiring a senior backend engineer to design, build, and operate CIAM services powering registration, login, authorization, and account lifecycle for B2C and B2B. You will implement identity standards (OAuth 2.0, OIDC, SAML, SCIM) and ship secure, scalable APIs in Python and Kotlin.

Join a remote-first company with strong security fundamentals, cloud-native architecture on AWS, and CI/CD automation.

Qualifications

• 7+ years as backend software engineer focusing on CIAM
• Experience with OAuth 2.0, OIDC, SAML, SCIM in production systems
• Strong API design and distributed systems knowledge
• Experience with AWS and cloud-native development
• Experience with CI/CD pipelines and automation

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and profile management for B2C and B2B.
• Implement and extend CIAM standards like OAuth 2.0, OIDC, SAML, and SCIM in code with scalable patterns.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Automate CIAM infrastructure and deployments using IaC and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services in high-scale environments.

Skills

Python

Kotlin

Distributed systems

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

API design

CI/CD

GitHub workflows

Buildkite

Terraform

Security fundamentals

Tools

Terraform

Buildkite

GitHub

Job description

Affirm is hiring a senior backend engineer to design, build, and operate CIAM services powering registration, login, authorization, and account lifecycle for B2C and B2B. You will implement identity standards (OAuth 2.0, OIDC, SAML, SCIM) and ship secure, scalable APIs in Python and Kotlin.

Join a remote-first company with strong security fundamentals, cloud-native architecture on AWS, and CI/CD automation.