Staff CIAM Backend Engineer - Remote

Affirm; Houston (TX); On-site; USD 204,000 - 264,000; Full time

Benefits offered by this job

Health coverage for you and dependents

Equity rewards

Stipends for health and tech

PTO and holidays

Job summary

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without hidden fees. The role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth, including registration, login, authorization, and account lifecycle across B2C and B2B.

The team builds and operates backend services powering identity for web, mobile, and partner

Qualifications

• 7+ years of experience designing, developing and launching backend systems at scale.
• Strong knowledge of OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration.
• 5+ years of professional backend software engineering experience.
• Experience with Python or Kotlin and building CIAM systems.

Responsibilities

• Design, build, and operate CIAM backend services for registration, authentication, and account lifecycle.
• Implement identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code with scalable patterns.
• Develop backend APIs in Python and Kotlin for web, mobile, and partner apps.
• Integrate CIAM with internal systems like data stores, messaging, and fraud signals.
• Own secure authentication flows including MFA and adaptive auth.
• Automate CIAM deployments with IaC and CI/CD pipelines.
• Monitor and optimize CIAM services for performance and abuse detection.

Skills

Python

Kotlin

Distributed systems

AWS

MySQL

Spark

Kubernetes

OAuth 2.0

OIDC

SAML

SCIM

API design

CI/CD

GitHub workflows

Buildkite

Terraform

Security fundamentals

Communication

Collaboration

Tools

AWS

MySQL

Spark

Kubernetes

Buildkite

Terraform

Job description

Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without hidden fees. The role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth, including registration, login, authorization, and account lifecycle across B2C and B2B.

The team builds and operates backend services powering identity for web, mobile, and partner