Senior CIAM Software Engineer
Affirm · Atlanta, GA
- Hybrid
- Full-time
- $233,000 / year
- Atlanta, GA
✓ Hiring manager found for this role
Email the hiring manager to get a response.
Get their verified email + an intro that's ready to send.
Senior CIAM Software Engineer
Affirm · Atlanta, GA
Riley Chen
Hiring Manager · h•••••@job-boards.greenhouse.io
✍️ Your intro emailReady to send
Subject: Interested in the Senior CIAM Software Engineer role at Affirm
Hi Riley — I came across the Senior CIAM Software Engineer opening and wanted to reach out directly. I've spent the last few years doing exactly this kind of work, and Affirm stood out because…
🔒 Unlock to read & send
✎ Personalized to your résumé after sign-up.
$1 once
Just this hiring manager
Best value
$9/mo
Unlimited — any job, anywhere
- ✓ Verified email of the hiring manager
- ✓ Intro email personalized to your résumé
- ✓ $9/mo = unlimited — any job link
Secure checkout · cancel anytime
View the original posting ↗
Not recommended alone — most applicants never hear back.
Job highlights
- Build core CIAM backend services for identity and authentication.
- Implement identity standards like OAuth 2.0 and OIDC.
- Develop APIs using Python and Kotlin for identity capabilities.
- Automate infrastructure and deployments with IaC and CI/CD.
- Work remotely with comprehensive health and wellness benefits.
About the role
About Affirm
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. Affirm is building the next generation of customer identity and authentication. This role is a hands-on engineering position inside Information Security, focused on designing and shipping core CIAM capabilities that protect customers and support growth. You will build and operate backend services that power registration, login, authorization, and account lifecycle flows across B2C and B2B experiences. You will work closely with partner engineering teams and ensure identity features are delivered with strong security fundamentals, reliability, and operational rigor.What you’ll do
- Design, build, and operate core CIAM backend services that support customer registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms.
- Implement and extend identity standards such as OAuth 2.0, OIDC, SAML, and SCIM in code, ensuring correctness, scalability, and clean integration patterns.
- Develop backend APIs and services in Python and Kotlin that expose identity capabilities to web, mobile, and partner applications.
- Integrate CIAM platforms with internal systems, including user data stores, messaging, fraud signals, and downstream customer platforms.
- Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent, and adaptive authentication logic.
- Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines, treating identity as a core platform service.
- Monitor, debug, and optimize CIAM services for performance, resilience, and abuse detection in high-scale environments.
What we look for
- Strong experience designing and implementing CIAM systems, with deep, hands-on knowledge of OAuth 2.0, OIDC, SAML, and SCIM beyond basic configuration.
- 5+ years of professional backend software engineering experience.
- Strong production experience in Python or a similar backend language.
- Experience designing APIs, automation frameworks, and distributed systems.
- Hands-on experience building and maintaining CI/CD pipelines.
- Experience with GitHub-based development workflows and Buildkite or similar build systems.
- Experience with cloud-native development, preferably AWS.
- Hands-on experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C using custom code, hooks, and APIs.
- Solid understanding of backend and distributed systems fundamentals, including API design, data modeling, latency, error handling, and observability.
- Experience with Infrastructure as Code and automation tools such as Terraform, plus CI/CD pipelines for deploying backend services.
- Strong security fundamentals applied through engineering, including access control models, token handling, encryption, MFA, and privacy by design.
- Clear communication skills and the ability to work closely with product, frontend, mobile, and security teams while owning backend identity services.
- Familiarity with tools such as Cursor and other AI-augmented development environments.
Compensation & Benefits
Affirm is proud to be a remote-first company! The majority of our roles are remote and you can work almost anywhere within the country of employment. Affirmers in proximal roles have the flexibility to work remotely, but will occasionally be required to work out of their assigned Affirm office. A limited number of roles remain office-based due to the nature of their job responsibilities.Key highlights of our benefits package include:
- Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents.
- Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses.
- Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge.
- ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount.
Key skills/competency
- CIAM
- Software Engineering
- Python
- Kotlin
- OAuth 2.0
- OIDC
- SAML
- SCIM
- Backend Development
- Information Security
Skills & topics
- Senior CIAM Software Engineer
- CIAM
- Software Engineering
- Python
- Kotlin
- OAuth
- OIDC
- SAML
- SCIM
- Backend Development
- Information Security
- AWS
- Terraform
- CI/CD
- Remote
- Identity Management
- Authentication
- Authorization
How to get hired
- Tailor your resume: Highlight your 5+ years of backend engineering, CIAM experience, and proficiency in Python/Kotlin, OAuth 2.0, OIDC, SAML, and SCIM.
- Showcase security expertise: Emphasize your understanding of security fundamentals, access control, MFA, and privacy by design in your application.
- Demonstrate cloud and CI/CD skills: Detail your experience with AWS, Infrastructure as Code (Terraform), and CI/CD pipelines (Buildkite, GitHub Actions).
- Prepare for technical interviews: Be ready to discuss distributed systems, API design, and practical examples of CIAM integrations.
- Understand Affirm's mission: Articulate how your skills contribute to Affirm's goal of honest and friendly credit.
Technical preparation
Master CIAM concepts: OAuth 2.0, OIDC, SAML, SCIM.,Practice Python/Kotlin backend development and API design.,Build IaC and CI/CD pipelines for cloud services.,Review distributed systems fundamentals and security best practices.
Behavioral questions
Describe a complex CIAM system you designed or operated.,How do you ensure security in backend service development?,How do you collaborate with non-technical teams on features?,Tell me about a time you automated a critical process.
Prefer to apply the usual way?
Not recommended alone — most applicants never hear back. Email the hiring manager first.
Frequently asked questions
- What is the typical career path for a Senior CIAM Software Engineer at Affirm?
- As a Senior CIAM Software Engineer at Affirm, your career path could involve deepening your expertise in identity and security, potentially leading to principal engineer roles or moving into management positions within the Information Security or Engineering departments. You might also have opportunities to specialize in areas like fraud prevention or advanced authentication mechanisms.
- How does Affirm ensure a good work-life balance for its remote employees?
- Affirm promotes work-life balance through its remote-first culture, offering competitive time off, including vacation and holidays, and flexible work arrangements. They also provide generous stipends for wellness and lifestyle needs, encouraging employees to recharge and maintain personal well-being.
- What kind of collaboration can I expect as a Senior CIAM Software Engineer at Affirm?
- You will collaborate closely with partner engineering teams, product managers, frontend and mobile developers, and other security professionals. This cross-functional teamwork is essential for designing and implementing robust identity features across B2C and B2B platforms.
- Does Affirm support professional development for its engineers?
- While not explicitly detailed, Affirm's focus on technology, including AI-augmented development tools, and their comprehensive benefits package, which may include stipends for professional growth, suggest a commitment to employee development. Engaging with their remote-first culture and diverse engineering challenges also provides ample learning opportunities.
- How are salary and equity determined for the Senior CIAM Software Engineer role at Affirm?
- Salary and equity at Affirm are determined by factors such as location, experience, and job-related skills, with specific pay grades and equity grades assigned. Employees new to Affirm typically start at the beginning of the pay range. The total compensation package includes base pay, equity, and monthly stipends.
- What is the role of Information Security within Affirm's CIAM initiatives?
- In this role, you'll be part of the Information Security team, focusing on building and operating core CIAM capabilities. This means your work directly contributes to protecting customers and supporting Affirm's growth through robust identity and authentication systems.
- What specific CIAM platforms does Affirm integrate with or utilize?
Similar roles
Open positions we recommend based on this role.