Senior CIAM Software Engineer

Affirm is seeking a Senior CIAM Software Engineer to join its Information Security team on a remote basis in Canada. In this hands-on role, you will design, build, and operate backend services that power customer identity, authentication, and account management across Affirm's B2C and B2B platforms.

Responsibilities

• Design, build, and operate core CIAM backend services supporting customer registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms
• Implement and extend identity standards including OAuth 2.0, OIDC, SAML, and SCIM in production code, ensuring correctness, scalability, and clean integration patterns
• Develop backend APIs and services in Python and Kotlin that expose identity capabilities to web, mobile, and partner applications
• Integrate CIAM platforms with internal systems including user data stores, messaging, fraud signals, and downstream customer platforms
• Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent, and adaptive authentication logic
• Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines
• Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection in high-scale environments

Requirements

• 5+ years of professional backend software engineering experience
• Strong production experience in Python or similar backend language
• Deep, hands-on knowledge of OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration
• Demonstrated experience designing and implementing CIAM systems
• Experience designing APIs, automation frameworks, and distributed systems
• Hands-on experience building and maintaining CI/CD pipelines
• Experience with GitHub-based development workflows and Buildkite or similar build systems
• Cloud-native development experience, preferably with AWS
• Hands-on experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C using custom code, hooks, and APIs
• Solid understanding of backend and distributed systems fundamentals, including API design, data modeling, latency, error handling, and observability
• Experience with Infrastructure as Code and automation tools such as Terraform

Benefits

• Remote work location in Canada