Senior CIAM Software Engineer

Affirm

Remote

5+ years

Portland, OR

Full-time

$173,000 - $233,000 per year (all other U.S. states)

Apply with JobPilot

Your own AI agent tailors your resume and fills the form - on your machine, on your Claude or Codex plan.

Get the agent

Skills

OAuth 2.0 OIDC SAML SCIM Python Kotlin CI/CD AWS Terraform CIAM platforms (Okta, Auth0, Ping Identity, ForgeRock, Azure AD B2C)distributed systems MFA and step-up authentication observability backend APIs

About the role

Backend engineer inside Information Security building next-gen customer identity and authentication (CIAM). Ships core CIAM capabilities for registration, login, authorization, and account lifecycle across B2C and B2B. Remote-first.

Requirements

5+ years of professional backend software engineering
Strong hands-on CIAM knowledge: OAuth 2.0, OIDC, SAML, SCIM
Strong production experience in Python or a similar backend language
Experience designing APIs, automation frameworks, distributed systems
Hands-on CI/CD pipelines
Cloud-native development, preferably AWS
Infrastructure as Code (Terraform) plus CI/CD
Security fundamentals: access control, token handling, encryption, MFA

What you'll do

Design, build, operate core CIAM backend services (registration, authentication, authorization, account lifecycle)
Implement and extend OAuth 2.0, OIDC, SAML, SCIM standards in code
Develop backend APIs and services in Python and Kotlin
Own secure authentication flows end to end: MFA, step-up, device binding, adaptive auth
Automate CIAM infrastructure and deployments via IaC and CI/CD

Where this was posted

linkedin.com
https://linkedin.com/jobs/view/4397662049