Senior CIAM Security Engineer: Scale Trusted Identities

Affirm; Austin (TX); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage

Flexible Spending Wallets

Time off

ESPP

Job summary

Affirm is seeking an experienced backend engineer to design and ship CIAM capabilities that power registration, login, authorization, and account lifecycle for B2C and B2B users. You will implement identity standards (OAuth 2.0, OIDC, SAML) in code, and build scalable backend APIs in Python or Kotlin.

You will own end-to-end secure authentication flows, integrate CIAM platforms with internal systems, and automate deployments using Terraform and CI/CD pipelines in a remote-first environment.

Qualifications

• 7+ years of backend design, development and launch experience at scale.
• Strong hands-on knowledge of CIAM technologies and standards (OAuth 2.0, OIDC, SAML, SCIM).
• Proficiency in Python or Kotlin and building distributed systems on AWS.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, authorization, and account lifecycle across B2C/B2B.
• Implement identity standards and integrate CIAM with internal systems and data stores.
• Own secure authentication flows including MFA, adaptive authentication and device binding.
• Automate CIAM infrastructure and deployments with IaC and CI/CD pipelines.

Skills

CIAM design

Python/Kotlin

AWS

Distributed systems

OAuth 2.0

OIDC

SAML

CI/CD

Terraform

Security fundamentals

Tools

Okta integration

Auth0 integration

Azure AD B2C

Kubernetes

Terraform

Buildkite

MySQL

Spark

Job description

Affirm is seeking an experienced backend engineer to design and ship CIAM capabilities that power registration, login, authorization, and account lifecycle for B2C and B2B users. You will implement identity standards (OAuth 2.0, OIDC, SAML) in code, and build scalable backend APIs in Python or Kotlin.

You will own end-to-end secure authentication flows, integrate CIAM platforms with internal systems, and automate deployments using Terraform and CI/CD pipelines in a remote-first environment.