Affirm
Staff CIAM Software Engineer
$204K–$290K
Remote US · Remote · Staff · Full-time · Posted Aug 12, 2026
- Experience
- 5+ years of professional backend software engineering experience; another section asks for 7+ years designing, developing, and launching backend systems at scale.
About the job
Designs, builds, and operates secure customer identity and authentication services for Affirm’s B2C and B2B products.
What you'll do
- Build and maintain CIAM services for registration, authentication, authorization, account lifecycle, and profile management.
- Implement identity standards and secure account flows, integrating CIAM with internal systems and partner applications.
- Automate deployments and operate services, improving performance, resilience, and abuse detection.
What they ask for
- Strong hands-on experience designing and implementing CIAM systems and OAuth 2.0, OIDC, SAML, and SCIM.
- 5+ years of professional backend software engineering experience.
- Production experience with Python or a similar backend language; experience with APIs and distributed systems.
- Hands-on CI/CD pipeline experience and experience with cloud-native development, preferably AWS.
Nice to have
- Experience extending or integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C.
- Familiarity with Cursor or other AI-augmented development environments.
Pay
$230,000 - $290,000 USD base salary; $204,000 - $264,000 USD base salary
Tools
Python, Kotlin, AWS, MySQL, Spark, Kubernetes, Terraform, Buildkite
AI focus
Familiarity with AI-augmented development environments is preferred; no other AI work is specified.
Model-written summary · the original posting is authoritative