Senior CIAM Backend Engineer - Remote, Scale & Security

Affirm; Las Vegas (NV); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health care coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is hiring a hands-on backend engineer for CIAM at scale. You’ll design and ship core CIAM capabilities powering registration, login, authorization, and account lifecycle for B2C and B2B experiences.

Focus areas include secure authentication with MFA, identity standards, and scalable backend APIs in Python and Kotlin. Remote-friendly US-based role with generous benefits and equity opportunities.

Qualifications

• 7+ years designing, developing and launching backend systems at scale with Python or Kotlin.
• Experience building highly available distributed systems using AWS, MySQL, Spark and Kubernetes.
• Strong communication for collaboration with global engineering teams.
• Experience delivering major features with a technical execution plan.
• Design, build and operate CIAM backend services for B2C/B2B platforms.
• Implement OAuth 2.0, OIDC, SAML, SCIM in code.

Responsibilities

• Design, develop and ship backend CIAM services for registration, login, authorization, and account lifecycle.
• Extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) with scalable patterns.
• Develop Python/Kotlin APIs exposing identity capabilities to web, mobile, and partner apps.
• Integrate CIAM with internal data stores, messaging, fraud signals, and downstream platforms.
• Own secure authentication flows including MFA, step-up, device binding, consent.
• Automate CIAM deployments via IaC and CI/CD pipelines.
• Monitor, debug and optimize CIAM services for performance and reliability.

Skills

CIAM design

OAuth 2.0

OIDC

SAML

SCIM

Python

Kotlin

AWS

Kubernetes

Distributed systems

CI/CD

GitHub workflows

Terraform

Okta

Auth0

Azure AD B2C

Tools

Okta

Auth0

Ping Identity

ForgeRock

Azure AD B2C

Terraform

Buildkite

Job description

Affirm is hiring a hands-on backend engineer for CIAM at scale. You’ll design and ship core CIAM capabilities powering registration, login, authorization, and account lifecycle for B2C and B2B experiences.

Focus areas include secure authentication with MFA, identity standards, and scalable backend APIs in Python and Kotlin. Remote-friendly US-based role with generous benefits and equity opportunities.