Remote opportunity at
AffirmStaff CIAM Software Engineer
Affirm operates in the financial technology sector, providing transparent payment solutions that allow consumers to pay over time without hidden costs. The organization is currently hiring…
Career Tools
About This Role
Affirm operates in the financial technology sector, providing transparent payment solutions that allow consumers to pay over time without hidden costs. The organization is currently hiring a Staff CIAM Software Engineer to join its Information Security division on a remote basis. This is a hands-on technical role focused on building, scaling, and operating customer identity and access management systems. The person in this position will construct backend services that govern…
Job Description
Affirm operates in the financial technology sector, providing transparent payment solutions that allow consumers to pay over time without hidden costs. The organization is currently hiring a Staff CIAM Software Engineer to join its Information Security division on a remote basis. This is a hands-on technical role focused on building, scaling, and operating customer identity and access management systems.
The person in this position will construct backend services that govern account lifecycle processes, registration, login protocols, and authorization across both business-to-consumer and business-to-business environments. Key duties include implementing modern identity standards, establishing secure authentication workflows like multi-factor authentication and device binding, and automating platform deployments using infrastructure as code and continuous integration pipelines.
This opportunity is well-suited for an experienced backend developer with a strong foundation in distributed systems, security principles, and customer identity platforms. Candidates should possess extensive technical expertise in languages such as Python or Kotlin, along with cloud-native development experience utilizing Amazon Web Services. Throughout the engagement, the engineer will coordinate closely with various product, security, and mobile engineering squads to deliver reliable and secure platform capabilities.
Responsibilities
- Design, construct, and manage core customer identity and access management backend services supporting registration, profile management, and authorization for consumer and commercial platforms.
- Write and extend identity standards including OAuth 2.0, OpenID Connect, Security Assertion Markup Language, and System for Cross-domain Identity Management within the codebase.
- Develop backend application programming interfaces and services using Python and Kotlin to serve web, mobile, and partner integrations.
- Connect identity platforms with internal databases, messaging tools, fraud detection indicators, and external consumer systems.
- Manage secure account authentication processes end-to-end, covering multi-factor authentication, step-up verification, device binding, and adaptive logic.
- Automate identity infrastructure and system deployments through continuous integration pipelines and infrastructure as code practices.
- Review, troubleshoot, and enhance services to maximize performance, system resilience, and abuse mitigation.
Requirements
- Seven or more years of background experience in designing, building, and launching large-scale backend systems using programming languages like Python or Kotlin.
- Extensive experience in developing highly available distributed systems utilizing infrastructure technologies such as Amazon Web Services, MySQL, Spark, and Kubernetes.
- Proven background in designing and executing customer identity and access management systems with hands-on proficiency in OAuth 2.0, OpenID Connect, Security Assertion Markup Language, and System for Cross-domain Identity Management.
- At least five years of professional backend software engineering experience.
- Production-level experience utilizing Python or a comparable backend development language.
- Hands-on practice integrating and extending identity platforms including Okta, Auth0, Ping Identity, ForgeRock, or Azure Active Directory B2C via custom code and application programming interfaces.
- Working knowledge of infrastructure automation tooling such as Terraform and continuous deployment pipelines.
Core Skills
Benefits
- Fully subsidized medical, dental, and vision insurance coverage for employees and their dependents.
- Monthly financial stipends designated for technology setup and health or wellness choices.
- Flexible time off policies and comprehensive holiday calendars.
- Participation in an employee stock purchase plan allowing discounted purchases of company shares.
Frequently Asked Questions
What is the location or remote work policy for this role?
This position is remote-first, allowing employees to work from almost anywhere within the country of employment, though occasional in-person office presence or an in-person onboarding experience may be required.
What is the employment type?
The role is a full-time position.
What salary is offered for this role?
The posting specifies a CAN base pay range per year from $181,000 to $241,000, while general base pay details for other locations are not explicitly stated beyond noting that new hires typically start at the bottom of the pay range.
What are the core technical experience requirements?
Applicants need 7+ years of backend system design experience with Python or Kotlin, 5+ years of professional backend engineering experience, and extensive hands-on knowledge of identity standards like OAuth 2.0, OIDC, SAML, and SCIM.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.