Base Salary
$204k - $290k/yr
Responsibilities
- Design, build, and operate CIAM backend services for registration, authentication, authorization, account lifecycle, and profile management.
- Implement and extend OAuth 2.0, OIDC, SAML, and SCIM identity standards in code.
- Develop Python and Kotlin backend APIs and services for web, mobile, and partner applications.
- Integrate CIAM platforms with user data stores, messaging, fraud signals, and downstream customer platforms.
- Own secure authentication and account flows including MFA, step-up authentication, device binding, consent, and adaptive authentication.
- Automate CIAM infrastructure and deployments with Infrastructure as Code and CI/CD pipelines.
- Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection at high scale.
- Define technical and execution plans for major features and system components and deprecate existing functionality when needed.
- Write high-quality, maintainable code and collaborate with partner engineering teams.
Requirements
- At least 7 years of experience designing, developing, and launching backend systems at scale.
- At least 5 years of professional backend software engineering experience.
- Strong production experience with Python or a similar backend language, with Python or Kotlin used by the role.
- Experience designing APIs, automation frameworks, and distributed systems.
- Hands-on experience building and maintaining CI/CD pipelines and GitHub-based development workflows.
- Experience with cloud-native development, preferably AWS.
- Hands-on experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C using custom code, hooks, and APIs.
- Strong knowledge of OAuth 2.0, OIDC, SAML, and SCIM, beyond basic configuration.
- Experience with Infrastructure as Code and automation tools such as Terraform.
- Strong backend and distributed systems fundamentals, including API design, data modeling, latency, error handling, and observability.
- Strong security engineering fundamentals involving access control, token handling, encryption, MFA, and privacy by design.
- Clear communication and effective collaboration with product, frontend, mobile, and security teams.
- Familiarity with Cursor and other AI-augmented development environments.
Benefits
- Remote-first work arrangement with the ability to work almost anywhere within the country of employment.
- 100% subsidized medical, dental, and vision coverage for employees and dependents.
- Flexible Spending Wallets with stipends for technology, food, lifestyle, and family-forming expenses.
- Competitive vacation and holiday schedules.
- Employee stock purchase plan (ESPP).
- Base pay range is $230,000-$290,000 per year in CA, WA, NY, NJ, and CT, and $204,000-$264,000 per year in other U.S. states.
Tech Stack
About Affirm
At Affirm, we’re using today’s technology to bring significant disruptive innovation to the financial industry. We focus on improving the lives of consumers by delivering simple, honest and transparent financial products. We have roles across a variety of teams, including engineering, product, finance, operations, revenue, marketing, people and more. A note to applicants: Fake job and recruiting scams are on the rise. Affirm will never ask you to pay any upfront fees or send you any checks to purchase equipment during any part of the recruiting process. Affirm only uses legitimate company email address domains (either “@affirm.com” or "@us.greenhouse-mail.io”) to communicate with candidates via email. Affirm is also proud to be a remote-first company! Attracting great people starts by finding talent in different places. That's why we built remote work into the DNA of how we do business—but if an office space is more your style, we have offices in Chicago, New York City, Pittsburgh, San Francisco, Seattle, Toronto, Warsaw, Madrid and London. Not to mention we have comprehensive and award-winning benefits that were made for you. Interested in learning more? Check out our careers page and apply today! Visit affirm.com/careers for more information.