Senior CIAM Security Engineer - Remote

Affirm; Boston (MA); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health care coverage

Flex spending wallets

Time off

Employee stock purchase plan

Job summary

Affirm is reinventing credit and building next-gen customer identity and authentication. This hands-on engineering role sits in Information Security, focusing on CIAM capabilities that protect customers and enable growth.

You will design and operate core CIAM backend services for registration, login, authorization, and account lifecycle across B2C and B2B experiences, using Python and Kotlin. Expect secure, scalable, and observable systems in a remote-first environment.

Qualifications

• 7+ years of backend design, development and launch at scale.
• Proficient in Python or Kotlin and production-grade APIs.
• Hands-on experience with CIAM standards (OAuth 2.0, OIDC, SAML, SCIM).

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and profile management for B2C/B2B.
• Implement secure identity standards and scalable integration patterns.
• Develop Python/Kotlin backends exposing identity capabilities to web, mobile, and partner apps.

Skills

Backend design

Python

Kotlin

AWS

Kubernetes

OAuth 2.0 / OIDC / SAML / SCIM

CI/CD pipelines

Tools

AWS

MySQL

Spark

Kubernetes

GitHub workflows

Buildkite

Job description

Affirm is reinventing credit and building next-gen customer identity and authentication. This hands-on engineering role sits in Information Security, focusing on CIAM capabilities that protect customers and enable growth.

You will design and operate core CIAM backend services for registration, login, authorization, and account lifecycle across B2C and B2B experiences, using Python and Kotlin. Expect secure, scalable, and observable systems in a remote-first environment.