Staff CIAM Security Engineer

Affirm
Canada
Workplace: RemoteFull timeUSD 181,000 - 241,000 annuallyFunction: CybersecurityExperience: 7+ yearsSkills: ["Communication","Collaboration","Problem-solving","Security-minded engineering","Technical execution planning"]

Design and ship core CIAM backend capabilities that protect customer identity across B2C and B2B flows. Build and operate services for registration, login, authorization, account lifecycle, and profile management, integrating CIAM platforms and internal systems. Implement OAuth 2.0, OIDC, SAML, and SCIM standards, own secure end-to-end authentication (including MFA and device binding), and automate deployments with CI/CD and infrastructure-as-code while monitoring, debugging, and optimizing at high scale.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Affirm
Affirm
13 hours ago

Staff CIAM Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Design and ship core CIAM backend capabilities that protect customer identity across B2C and B2B flows. Build and operate services for registration, login, authorization, account lifecycle, and profile management, integrating CIAM platforms and internal systems. Implement OAuth 2.0, OIDC, SAML, and SCIM standards, own secure end-to-end authentication (including MFA and device binding), and automate deployments with CI/CD and infrastructure-as-code while monitoring, debugging, and optimizing at high scale.
Location: Canada
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design, build, and operate CIAM backend services for registration, authentication, authorization, account lifecycle, and profile management across B2C and B2B.
  • •Implement and extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) in code with correctness, scalability, and clean integrations.
  • •Develop backend APIs and services in Python and Kotlin to expose identity capabilities to web, mobile, and partner applications.
  • •Integrate CIAM platforms with internal systems and own secure authentication/account flows end to end, including MFA, step-up authentication, device binding, consent, and adaptive authentication logic.
  • •Automate CIAM infrastructure and deployments using infrastructure-as-code and CI/CD, and monitor, debug, and optimize services for performance, resilience, and abuse detection.

Pay and Benefits

Salary: USD 181,000 - 241,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionTech StipendPaid LeaveEspp

Key Requirements

  • •7+ years designing, developing, and launching backend systems at scale using Python or Kotlin.
  • •Experience developing highly available distributed systems using AWS and technologies such as MySQL, Spark, and Kubernetes.
  • •Strong production backend engineering experience with Python (or similar).
  • •Hands-on experience implementing CIAM systems and standards including OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration.
  • •Experience delivering major backend features/components with technical execution planning, writing high-quality, maintainable code.
Experience:7+ yearsCIAMDistributed systemsCloud-nativeSecurity engineering
Skills:CommunicationCollaborationProblem-solvingSecurity-minded engineeringTechnical execution planning
Languages:English
Tech Stack:PythonKotlinAWSMySQLSparkKubernetesOAuth 2.0OIDCSAMLSCIMCI/CDGitHubBuildkiteInfrastructure as CodeTerraformAPI designCIAMOktaAuth0Ping Identity

Company Brief

Affirm
Provides point-of-sale lending and buy-now-pay-later (BNPL) solutions for consumers and merchants, enabling installment payments, consumer financing, and embedded financial services through APIs and partnerships with retailers and platforms.
Industry: Lending
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2012
WebsiteLinkedIn