2 months ago
Remote, CanadaStaff+
Responsibilities
- Design, build, and operate CIAM backend services for customer registration, authentication, authorization, account lifecycle, and profile management across B2C and B2B platforms
- Implement and extend OAuth 2.0, OIDC, SAML, and SCIM identity standards in code
- Develop Python and Kotlin backend APIs and services for web, mobile, and partner applications
- Integrate CIAM platforms with user data stores, messaging, fraud signals, and downstream customer platforms
- Own secure authentication and account flows including MFA, step-up authentication, device binding, consent, and adaptive authentication
- Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines
- Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection
- Define technical and execution plans for major features and system components, including deprecating existing functionality, while producing high-quality maintainable code
- Collaborate with partner engineering teams to deliver reliable identity capabilities
Requirements
- 7+ years of experience designing, developing, and launching backend systems at scale, with 5+ years of professional backend software engineering experience also stated
- Strong production experience with Python or a similar backend language, with Kotlin experience listed for backend development
- Deep hands-on CIAM experience beyond basic configuration, including OAuth 2.0, OIDC, SAML, and SCIM
- Experience designing APIs, automation frameworks, and distributed systems
- Hands-on experience building and maintaining CI/CD pipelines and GitHub-based development workflows
- Experience with Buildkite or similar build systems and cloud-native development, preferably AWS
- Hands-on experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C using custom code, hooks, and APIs
- Understanding of API design, data modeling, latency, error handling, observability, access control, token handling, encryption, MFA, and privacy by design
- Experience with Infrastructure as Code and automation tools such as Terraform
- Clear communication and collaboration skills across product, frontend, mobile, security, and engineering teams
- Familiarity with Cursor and other AI-augmented development environments
Benefits
- Remote-first work arrangement with the ability to work almost anywhere within the country of employment, with occasional office work for proximal roles
- Affirm covers medical premiums for employees and dependents, with dental and vision coverage
- Flexible Spending Wallets with stipends for technology, food, lifestyle, and family-forming expenses
- Competitive vacation and holiday schedules
- Employee stock purchase plan with discounted shares
- Monthly health, wellness, and technology spending stipends
Tech Stack
About Affirm
Affirm provides buy now, pay later installment financing at online and in-store checkout, along with a consumer app and virtual card, for shoppers and merchants. It monetizes through merchant fees and interest on select loans, with no late fees. Founded in 2012 and headquartered in San Francisco, Affirm is a public company listed on NASDAQ that powers payments for thousands of ecommerce retailers.