Senior CIAM Backend Engineer - Scale Identity Systems

Affirm; Detroit (MI); On-site; USD 204,000 - 290,000; Full time

Benefits offered by this job

Health coverage

ESPP

Tech stipends

Generous time off

Remote-first

Job summary

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without hidden fees or compounding interest. You will design and ship core CIAM capabilities powering registration, login, authorization, and account lifecycle across B2C and B2B experiences.

You will own secure authentication flows end-to-end, implement MFA and adaptive authentication, and automate CIAM infrastructure with IaC and CI/CD.

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and profile management.
• Implement OAuth 2.0, OIDC, SAML, and SCIM in code with scalable patterns.
• Develop Python/Kotlin APIs for web, mobile, and partner apps.
• Automate CIAM infrastructure using IaC and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance and security.

Skills

Python

Kotlin

Distributed systems

AWS

MySQL

Spark

Kubernetes

CI/CD pipelines

OAuth 2.0

OIDC

SAML

SCIM

MFA

Tools

Okta

Auth0

Azure AD B2C

Terraform

Buildkite

GitHub Actions

Job description

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without hidden fees or compounding interest. You will design and ship core CIAM capabilities powering registration, login, authorization, and account lifecycle across B2C and B2B experiences.

You will own secure authentication flows end-to-end, implement MFA and adaptive authentication, and automate CIAM infrastructure with IaC and CI/CD.