6 months ago
Remote, CanadaSenior
Base Salary
$150k - $200k/yr
Responsibilities
- Design, build, and operate CIAM backend services for customer registration, authentication, authorization, account lifecycle, and profile management.
- Implement and extend OAuth 2.0, OIDC, SAML, and SCIM capabilities in production code.
- Develop Python and Kotlin backend APIs and services for web, mobile, and partner applications.
- Integrate CIAM platforms with user data stores, messaging systems, fraud signals, and downstream customer platforms.
- Own secure authentication and account flows including MFA, step-up authentication, device binding, consent, and adaptive authentication.
- Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
- Monitor, debug, and optimize high-scale CIAM services for performance, resilience, and abuse detection.
- Collaborate with partner engineering, product, frontend, mobile, and security teams.
Requirements
- At least five years of professional backend software engineering experience.
- Strong hands-on experience designing and implementing CIAM systems and identity standards including OAuth 2.0, OIDC, SAML, and SCIM.
- Strong production experience with Python or a similar backend language.
- Experience designing APIs, automation frameworks, and distributed systems.
- Hands-on experience building and maintaining CI/CD pipelines, with GitHub-based development workflows and Buildkite or a similar build system.
- Experience with cloud-native development, preferably on AWS.
- Hands-on experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C using custom code, hooks, and APIs.
- Understanding of backend and distributed-systems fundamentals including API design, data modeling, latency, error handling, and observability.
- Experience with Infrastructure as Code and automation tools such as Terraform.
- Strong engineering-focused security fundamentals, including access control models, token handling, encryption, MFA, and privacy by design.
- Ability to communicate clearly and collaborate with product, frontend, mobile, and security teams while owning backend identity services.
- Familiarity with Cursor and other AI-augmented development environments.
Benefits
- Remote-first work arrangement, with most roles allowed to work almost anywhere within the country of employment.
- 100% subsidized medical, dental, and vision coverage for employees and dependents.
- Flexible spending wallets and stipends for technology, food, lifestyle, and family-forming expenses.
- Competitive vacation and holiday schedules.
- Employee stock purchase plan with discounted shares.
- Monthly health, wellness, and technology spending stipends may be available.
- Reasonable accommodations are available during the interview process.
About Affirm
Affirm provides buy now, pay later installment financing at online and in-store checkout, along with a consumer app and virtual card, for shoppers and merchants. It monetizes through merchant fees and interest on select loans, with no late fees. Founded in 2012 and headquartered in San Francisco, Affirm is a public company listed on NASDAQ that powers payments for thousands of ecommerce retailers.