3 hours ago
Remote, CanadaSenior
Responsibilities
- Own the technical design and delivery of significant authentication platform capabilities from requirements and architecture through implementation, rollout, and operation.
- Build secure, highly available systems for sign-in, authentication factors, account recovery, step-up authentication, session management, authorization, and identity federation.
- Collaborate with product management, Security, Fraud, Compliance, Design, Analytics, and engineering stakeholders on technical decisions and trade-offs.
- Translate security, regulatory, fraud, and customer-experience requirements into pragmatic technical designs.
- Identify and resolve project, process, technology, security, reliability, and business issues.
- Create and monitor operational metrics, support availability, and participate in on-call and keep-the-lights-on efforts.
- Improve code review and design standards, contribute technical writing and talks, mentor engineers, and lead design reviews.
- Communicate technical decisions and lead investigations into complex production issues and systemic improvements.
Requirements
- At least 4 years of experience designing, developing, and launching backend systems at scale using Python, Kotlin, Java, or a comparable modern programming language.
- Experience developing highly available distributed systems with technologies such as AWS, MySQL, Kubernetes, relational databases, event-driven architectures, and RPC or API frameworks.
- Experience defining technical plans and designing secure, simple, elegant, and extensible systems or significant features.
- Proficiency making significant changes in large codebases using testing strategies, migration plans, and controlled rollouts.
- Experience with technical leadership, mentoring, ownership, and cross-functional collaboration.
- Strong verbal and written communication skills.
- Equivalent practical experience or a bachelor’s degree in a related field.
- Familiarity with OAuth 2.0, OpenID Connect, WebAuthn/passkeys, FIDO2, JWTs, public-key cryptography, NIST Digital Identity Guidelines, or PCI DSS.
- Experience designing session management, token issuance, account recovery, or multi-factor authentication systems.
- Familiarity with risk-based or adaptive authentication and the relationship between identity, security, compliance, and fraud controls.
Benefits
- Remote-first work arrangement with flexibility and eligibility limited to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.
- All new hires are invited to attend an in-person onboarding experience.
- 100% subsidized medical coverage, dental coverage, and vision coverage for employees and dependents.
- Monthly technology, health, and wellness spending stipends.
- Flexible time off and generous holiday calendars.
- Employee stock purchase plan with a discount.
- Inclusive interview accommodations for candidates with disabilities.
About Affirm
Affirm provides buy now, pay later installment financing at online and in-store checkout, along with a consumer app and virtual card, for shoppers and merchants. It monetizes through merchant fees and interest on select loans, with no late fees. Founded in 2012 and headquartered in San Francisco, Affirm is a public company listed on NASDAQ that powers payments for thousands of ecommerce retailers.