Senior CIAM Backend Engineer – Remote

Affirm; Sioux Falls (SD); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESP P

Job summary

Affirm is hiring for a senior backend engineer focused on CIAM within Information Security. You will design, build, and operate core CIAM services powering registration, authentication, and profile management for B2C and B2B platforms.

You will implement standards like OAuth 2.0, OIDC, SAML, and SCIM, develop APIs in Python and Kotlin, and own end-to-end secure authentication flows with MFA and adaptive authentication. Remote-first with strong compensation and benefits.

Qualifications

• Experience designing CIAM systems with OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration.
• 5+ years of professional backend software engineering experience
• Strong production experience in Python or a similar backend language
• Experience designing APIs, automation frameworks, and distributed systems
• Hands-on experience building and maintaining CI/CD pipelines
• Experience with GitHub-based development workflows and Buildkite or similar build systems
• Experience with cloud-native development, preferably AWS
• Hands-on experience extending CIAM platforms using custom code and APIs
• Solid understanding of backend and distributed systems fundamentals
• Experience with Infrastructure as Code and Terraform, plus CI/CD pipelines
• Strong security fundamentals including access control, token handling, MFA, privacy by design
• Clear communication and collaboration across product, frontend, mobile, and security teams
• Familiarity with Cursor and AI-augmented development environments

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and profile management for B2C and B2B.
• Implement and extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop backend APIs in Python and Kotlin exposing identity capabilities to apps.
• Integrate CIAM with internal systems like data stores, messaging, and fraud signals.
• Own secure authentication and account flows end-to-end, including MFA and adaptive authentication.
• Automate CIAM infrastructure and deployments using IaC and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance and resilience.
• Ensure security and compliance in high-scale environments.
• Collaborate with partner engineering teams and security teams.
• Maintain reliable, scalable backend services with strong operational practices.

Skills

Python

Kotlin

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

API design

CI/CD

Terraform

GitHub workflows

Buildkite

Security fundamentals

MFA

Tools

Okta

Auth0

Ping Identity

ForgeRock

Azure AD B2C

Job description

Affirm is hiring for a senior backend engineer focused on CIAM within Information Security. You will design, build, and operate core CIAM services powering registration, authentication, and profile management for B2C and B2B platforms.

You will implement standards like OAuth 2.0, OIDC, SAML, and SCIM, develop APIs in Python and Kotlin, and own end-to-end secure authentication flows with MFA and adaptive authentication. Remote-first with strong compensation and benefits.