2 months ago
Base Salary
$204k - $290k/yr
Responsibilities
- Design, build, and operate CIAM backend services for customer registration, authentication, authorization, account lifecycle, and profile management across B2C and B2B platforms.
- Implement and extend OAuth 2.0, OIDC, SAML, and SCIM identity standards in production code.
- Develop Python and Kotlin backend APIs and services for web, mobile, and partner applications.
- Integrate CIAM platforms with user data stores, messaging systems, fraud signals, and downstream customer platforms.
- Own secure authentication and account flows including MFA, step-up authentication, device binding, consent, and adaptive authentication.
- Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
- Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection at high scale.
- Define technical and execution plans for major features, system components, and deprecation of existing functionality.
- Write high-quality, maintainable code and collaborate with partner engineering teams on identity feature delivery.
Requirements
- At least 7 years of experience designing, developing, and launching backend systems at scale is requested in the role description.
- At least 5 years of professional backend software engineering experience is required.
- Strong production experience with Python or a similar backend language is required, with Python or Kotlin used in the role.
- Experience designing APIs, automation frameworks, and distributed systems is required.
- Hands-on experience building and maintaining CI/CD pipelines, GitHub-based development workflows, and Buildkite or similar build systems is required.
- Cloud-native development experience, preferably with AWS, is required.
- Hands-on experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C using custom code, hooks, and APIs is required.
- Strong knowledge of OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration is required.
- Understanding of API design, data modeling, latency, error handling, observability, access control, token handling, encryption, MFA, and privacy by design is required.
- Experience with Infrastructure as Code and automation tools such as Terraform is required.
- Ability to collaborate clearly with product, frontend, mobile, security, and global engineering teams is required.
- Familiarity with Cursor and other AI-augmented development environments is preferred.
Benefits
- Remote-first work arrangement within the country of employment, with occasional office work for proximal roles.
- Affirm covers 100% of medical premiums for employees and dependents, with dental and vision coverage.
- Flexible Spending Wallets with stipends for technology, food, lifestyle needs, and family-forming expenses.
- Competitive vacation and holiday schedules.
- Employee Stock Purchase Plan (ESPP) offering discounted company shares.
- Monthly health, wellness, and technology spending stipends may be included in total compensation.
Tech Stack
About Affirm
Affirm provides buy now, pay later installment financing at online and in-store checkout, along with a consumer app and virtual card, for shoppers and merchants. It monetizes through merchant fees and interest on select loans, with no late fees. Founded in 2012 and headquartered in San Francisco, Affirm is a public company listed on NASDAQ that powers payments for thousands of ecommerce retailers.