Senior CIAM Backend Engineer (Remote)

Affirm; Boise (ID); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage

Equity

Remote-friendly

Wellness stipend

Job summary

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. Affirm is building the next generation of customer identity and authentication.

This role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth.

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale.
• Deep hands-on knowledge of OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration.
• Experience with AWS, MySQL, Spark, and Kubernetes in production environments.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle for B2C and B2B.
• Implement and extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop APIs and services in Python and Kotlin exposing identity capabilities to web, mobile, and partner apps.
• Own secure authentication and account flows end to end, including MFA and adaptive authentication.

Skills

Python

Kotlin

AWS

MySQL

Kubernetes

OAuth 2.0

OIDC

CIAM

Security

Spark

Terraform

Tools

Spark

Terraform

Job description

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. Affirm is building the next generation of customer identity and authentication.

This role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth.