Senior CIAM Security Engineer - Scale Identity & Auth

Affirm; Pittsburgh (Allegheny County); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Equity rewards

Tech stipends for health and devices

Job summary

Affirm is a remote-first company reinventing credit with a focus on secure, scalable CIAM backend services. You will design and ship core authentication, registration, and account lifecycle features for B2C and B2B experiences, working with AWS, MySQL, Spark, and Kubernetes.

You’ll implement OAuth 2.0, OIDC, SAML, and SCIM in code, build APIs in Python or Kotlin, and drive secure, observable systems with IaC and CI/CD pipelines. Strong collaboration with global teams is essential.

Qualifications

• 7+ years of backend design, development and launch at scale.
• Strong hands-on CIAM experience with OAuth/OIDC/SAML/SCIM.
• Deep knowledge of distributed systems and API design.
• Proficient in Python or Kotlin and cloud-native tech stack.

Responsibilities

• Design, build, and operate CIAM backend services for registration, login and account lifecycle.
• Implement and extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Integrate CIAM with data stores, messaging, fraud signals, and downstream platforms.
• Own secure authentication flows including MFA and adaptive auth.
• Automate CIAM infrastructure and deployments with IaC and CI/CD.

Skills

Backend design

CIAM systems

OAuth 2.0/OIDC/SAML/SCIM

Distributed systems

APIs

Security fundamentals

Infrastructure as Code

CI/CD pipelines

Collaborative communication

Tools

Terraform

AWS

Kubernetes

Buildkite

GitHub workflows

Okta/Auth0/Ping Identity/ForgeRock/Azure AD B2C

MySQL

Spark

Azure AD B2C

Job description

Affirm is a remote-first company reinventing credit with a focus on secure, scalable CIAM backend services. You will design and ship core authentication, registration, and account lifecycle features for B2C and B2B experiences, working with AWS, MySQL, Spark, and Kubernetes.

You’ll implement OAuth 2.0, OIDC, SAML, and SCIM in code, build APIs in Python or Kotlin, and drive secure, observable systems with IaC and CI/CD pipelines. Strong collaboration with global teams is essential.