Staff CIAM Security Engineer

Affirm
United States
Workplace: RemoteFull timeUSD 204,000 - 290,000 annuallyFunction: CybersecurityExperience: 7+ yearsSkills: ["Communication","Collaboration","Security fundamentals","Operational rigor","System design"]

Build and operate CIAM backend services that power customer registration, authentication, authorization, and account lifecycle flows across B2C and B2B. Design distributed, secure systems and APIs using Python and Kotlin, integrating identity standards and CIAM platforms (e.g., OAuth 2.0, OIDC, SAML, SCIM; Okta/Auth0/Ping). Own end-to-end secure authentication, MFA and adaptive flows, and improve reliability through automation, CI/CD, observability, and performance tuning.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Affirm
Affirm
13 hours ago

Staff CIAM Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Build and operate CIAM backend services that power customer registration, authentication, authorization, and account lifecycle flows across B2C and B2B. Design distributed, secure systems and APIs using Python and Kotlin, integrating identity standards and CIAM platforms (e.g., OAuth 2.0, OIDC, SAML, SCIM; Okta/Auth0/Ping). Own end-to-end secure authentication, MFA and adaptive flows, and improve reliability through automation, CI/CD, observability, and performance tuning.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Design, build, and operate core CIAM backend services for registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B.
  • •Implement and extend identity standards (OAuth 2.0, OIDC, SAML, SCIM) with correctness, scalability, and clean integration patterns.
  • •Develop backend APIs and services in Python and Kotlin to expose identity capabilities to web, mobile, and partner applications.
  • •Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent, and adaptive authentication logic.
  • •Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines; monitor, debug, and optimize for performance, resilience, and abuse detection.

Pay and Benefits

Salary: USD 204,000 - 290,000 annually
Equity and Bonus:Equity
Perks:Health InsuranceDentalVisionEspp

Key Requirements

  • •7+ years designing, developing, and launching backend systems at scale using languages like Python or Kotlin.
  • •Experience building highly available distributed systems using AWS, MySQL, Spark, and Kubernetes.
  • •5+ years of professional backend software engineering experience with strong production experience in Python (or similar backend language).
  • •Hands-on CI/CD and cloud-native experience, including GitHub workflows and Buildkite (or similar build systems).
  • •Deep, hands-on CIAM experience with OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration, including integration of CIAM platforms via custom code/APIs.
Experience:7+ yearsCIAMIdentity and authenticationDistributed systemsCloud-native
Skills:CommunicationCollaborationSecurity fundamentalsOperational rigorSystem design
Languages:English
Tech Stack:PythonKotlinAWSMySQLSparkKubernetesOAuth 2.0OIDCSAMLSCIMAPI designCI/CDGitHubBuildkiteInfrastructure as CodeTerraformOktaAuth0Ping IdentityForgeRock

Company Brief

Affirm
Provides point-of-sale lending and buy-now-pay-later (BNPL) solutions for consumers and merchants, enabling installment payments, consumer financing, and embedded financial services through APIs and partnerships with retailers and platforms.
Industry: Lending
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2012
WebsiteLinkedIn