Senior CIAM Security Engineer — Remote

Affirm; Baltimore (MD); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is reinventing credit to make it more honest and friendly, empowering customers to buy now and pay later with transparent terms. This hands-on backend CIAM role focuses on designing and shipping core authentication and account lifecycle services for B2C and B2B experiences, with a strong emphasis on security, reliability, and scalability.

You will build backend APIs in Python and Kotlin, implement OAuth 2.0, OIDC, SAML, and SCIM, and operate infrastructure as code in a remote-first

Qualifications

• 7+ years of backend experience designing, developing and launching systems at scale.
• Experience with AWS, MySQL, Spark, and Kubernetes.
• Strong communication skills for collaboration with a global engineering team.
• Experience delivering major features with a technical and execution plan.
• Ability to implement OAuth 2.0, OIDC, SAML, and SCIM in code.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, and account lifecycle for B2C and B2B platforms.
• Develop backend APIs and services in Python and Kotlin that expose identity capabilities.
• Automate CIAM infrastructure using Infrastructure as Code and CI/CD pipelines.
• Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection.
• Integrate CIAM platforms with internal systems and partner applications.
• Own secure authentication flows including MFA, step-up authentication, device binding, and adaptive authentication.

Skills

Backend design

Distributed systems

Security fundamentals

Execution planning

Communication

Tools

Python

Kotlin

AWS

MySQL

Spark

Kubernetes

Job description

Affirm is reinventing credit to make it more honest and friendly, empowering customers to buy now and pay later with transparent terms. This hands-on backend CIAM role focuses on designing and shipping core authentication and account lifecycle services for B2C and B2B experiences, with a strong emphasis on security, reliability, and scalability.

You will build backend APIs in Python and Kotlin, implement OAuth 2.0, OIDC, SAML, and SCIM, and operate infrastructure as code in a remote-first