Senior CIAM Backend Engineer

Affirm, Inc.; Northern (KY); Hybrid; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage at no cost

Spending stipends for tech setup

Flexible time off and holidays

ESPP stock purchase plan

Job summary

Affim is seeking an experienced CIAM backend engineer to design, implement, and operate scalable identity services for B2C and B2B platforms. You will drive secure registration, authentication, and account lifecycle workflows with Python and Kotlin, integrating OAuth 2.0, OIDC, SAML, and SCIM.

This role emphasizes reliability, security, and collaboration across global teams. The successful candidate will work in a remote-first environment with flexible hours, contributing to core CIAM

Qualifications

• Experience designing and launching CIAM backend systems.
• Proficient in OAuth 2.0, OIDC, SAML, SCIM.
• Strong experience with AWS, MySQL, Spark, and Kubernetes.
• Clear communication and collaboration across global engineering teams.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, and account lifecycle.
• Implement identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code.
• Develop APIs in Python and Kotlin for web, mobile, and partner apps.
• Automate CI/CD pipelines and infrastructure as code for scalable identity platforms.
• Monitor, debug, and optimize CIAM services for performance and security.

Skills

Backend development

Python/Kotlin

Distributed systems

CIAM security

Communication

Tools

AWS

MySQL

Spark

Kubernetes

GitHub workflows

Buildkite

Job description

Affim is seeking an experienced CIAM backend engineer to design, implement, and operate scalable identity services for B2C and B2B platforms. You will drive secure registration, authentication, and account lifecycle workflows with Python and Kotlin, integrating OAuth 2.0, OIDC, SAML, and SCIM.

This role emphasizes reliability, security, and collaboration across global teams. The successful candidate will work in a remote-first environment with flexible hours, contributing to core CIAM