Remote Staff CIAM Security Engineer

Affirm; Philadelphia (Philadelphia County); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Equity / ESPP

Job summary

Affirm is reinventing credit to make it more honest and friendly, with a remote-first culture in the United States. This backend security role focuses on building CIAM capabilities that protect customers and support growth across B2C and B2B experiences.

You will design, implement, and operate core CIAM services and APIs in Python or Kotlin, ensuring security, reliability, and scalable integration with internal systems and partner applications.

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale.
• Strong backend experience in Python or Kotlin.
• Hands-on with cloud and container tech: AWS, Kubernetes, Spark, MySQL.
• Excellent written and verbal communication for cross‑functional teams.
• Ability to deliver major features with clear tech and execution plans.
• Design, build, and operate CIAM backend services for B2C/B2B.
• Implement OAuth 2.0, OIDC, SAML, SCIM in code.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle for B2C and B2B.
• Implement and extend identity standards with scalable patterns.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Integrate CIAM with internal systems, data stores, messaging, and fraud signals.
• Own secure auth and account flows end to end, including MFA and adaptive auth.
• Automate CIAM infrastructure with IaC and CI/CD pipelines.
• Monitor and optimize CIAM services for performance and abuse detection.

Skills

Backend design

Python/Kotlin

AWS

MySQL

Kubernetes

Communication

APIs/Authorization

CI/CD

Tools

AWS

Kubernetes

Spark

MySQL

Terraform

GitHub workflows

Buildkite

Job description

Affirm is reinventing credit to make it more honest and friendly, with a remote-first culture in the United States. This backend security role focuses on building CIAM capabilities that protect customers and support growth across B2C and B2B experiences.

You will design, implement, and operate core CIAM services and APIs in Python or Kotlin, ensuring security, reliability, and scalable integration with internal systems and partner applications.