Senior CIAM Backend Engineer (Remote)

Affirm; Minneapolis (MN); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Equity rewards

Monthly stipends for health, wellness,

100% subsidized medical coverage

Job summary

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without hidden fees or compounding interest. This role is a hands-on engineering position inside Information Security, focused on CIAM capabilities that protect customers and support growth.

You will design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle for B2C and B2B platforms.

Qualifications

• 7+ years of backend engineering experience designing, developing, and launching systems at scale.
• Proficient in Python or Kotlin and building highly available distributed services.
• Strong knowledge of cloud-native architectures and security fundamentals.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, and account lifecycle for B2C and B2B.
• Implement and extend identity protocols (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop and maintain backend APIs for web, mobile, and partner apps.
• Integrate CIAM platforms with internal systems and data stores.
• Own secure authentication flows including MFA and adaptive auth.
• Automate CIAM infrastructure using IaC and CI/CD pipelines.
• Monitor and optimize CIAM services for performance and resilience.

Skills

Python

Kotlin

Distributed systems

AWS

OAuth/OIDC/SAML

CI/CD

Security fundamentals

Communication

Tools

Okta

Auth0

Ping Identity

Azure AD B2C

Terraform

Buildkite

Kubernetes

Job description

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without hidden fees or compounding interest. This role is a hands-on engineering position inside Information Security, focused on CIAM capabilities that protect customers and support growth.

You will design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle for B2C and B2B platforms.