Senior CIAM Backend Engineer — Remote, AWS & Security

Affirm; Seattle (WA); On-site; USD 230,000 - 290,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Employee stock purchase plan (ESPP)

Flexible stipends for tech and health

Remote-first work culture

Job summary

Affirm is reinventing credit with a remote-first team focused on building a secure CIAM platform. You will design and ship core authentication, authorization, and account lifecycle services powering B2C and B2B experiences.

You will implement identity standards like OAuth 2.0, OIDC, SAML, and SCIM, and develop backend APIs in Python and Kotlin for web, mobile, and partner apps. Strong security and scalable architecture are critical to this role.

Qualifications

• 5+ years of backend software engineering experience.
• Strong experience designing and implementing CIAM systems.
• Production experience with Python or a similar backend language.
• Experience designing APIs, automation frameworks, and distributed systems.
• Hands-on experience with CI/CD pipelines and cloud-native development (AWS).
• Experience with Okta/Auth0/Ping Identity/ForgeRock/Azure AD B2C integration via code.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle for B2C and B2B.
• Implement and extend OAuth 2.0, OIDC, SAML, and SCIM in code.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Automate CIAM infrastructure and deployments via IaC and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance and resilience.

Skills

Python

Kotlin

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

CI/CD

Terraform

CIAM

APIs

Okta/Auth0/Ping/ForgeRock/Azure AD B2C

Education

5+ years backend software engineering experience

Tools

GitHub-based workflows

Buildkite

CI tooling

Job description

Affirm is reinventing credit with a remote-first team focused on building a secure CIAM platform. You will design and ship core authentication, authorization, and account lifecycle services powering B2C and B2B experiences.

You will implement identity standards like OAuth 2.0, OIDC, SAML, and SCIM, and develop backend APIs in Python and Kotlin for web, mobile, and partner apps. Strong security and scalable architecture are critical to this role.