Senior CIAM Software Engineer

Affirm

Confirmed live yesterday High trust

Remote

Quick summary

Work type: Remote
Location: Remote
Salary: $195,000–$255,000 / yr
Posted: 155 days ago
Freshness: Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $192k

This role $225k

$121k most similar roles pay here $269k

This role pays more than 82% of similar roles. Most pay $167,046–$217,725 — the shaded band above. At the midpoint, this role pays about $225k versus about $192k for comparable roles.

Based on 240 similar postings.

Employer

About Affirm

Affirm is a buy-now, pay-later (BNPL) financial technology company that offers point-of-sale installment loans to consumers, allowing them to split purchases into fixed monthly payments with transparent terms. Industry: Financial Technology & Consumer Lending

Affirm currently has 60 open roles on FindRole.

Listed pay typically runs $195,000–$255,000 across 60 roles with salary data.

Most-posted roles

View all roles at Affirm

At a glance

TL;DR · Senior CIAM Software Engineer

Role Posting Log in to save

The Senior CIAM Software Engineer joins the Information Security team to design and ship core customer identity and authentication capabilities. This hands-on role involves building and operating backend services that power registration, login, authorization, and account lifecycle flows for both B2C and B2B platforms. The engineer will implement identity standards such as OAuth 2.0, OIDC, SAML, and SCIM while developing backend APIs in Python and Kotlin to support web, mobile, and partner applications. Key responsibilities include managing MFA, device binding, and adaptive authentication logic while automating infrastructure using Terraform and CI/CD pipelines like Buildkite. The role requires expertise in distributed systems, cloud-native development on AWS, and integrating platforms such as Okta or Auth0. The work focuses on solving complex identity problems by ensuring security fundamentals, reliability, and performance in high-scale environments.

Skills

OAuth 2.0 OIDC SAML SCIM Python Kotlin AWS Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C API Design Distributed Systems Buildkite GitHub

What you'll do

Design, build, and operate core CIAM backend services for registration, authentication, and account lifecycle management.
Implement and extend identity standards including OAuth 2.0, OIDC, SAML, and SCIM in code.
Develop backend APIs and services using Python and Kotlin to expose identity capabilities to web and mobile platforms.
Integrate CIAM platforms with internal systems such as user data stores, fraud signals, and messaging.
Own secure authentication flows including MFA, step-up authentication, device binding, and adaptive logic.
Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
Monitor, debug, and optimize services for performance, resilience, and abuse detection in high-scale environments.

What we're looking for

5+ years of professional backend software engineering experience.
Strong production experience in Python or a similar backend language.
Deep hands-on knowledge of identity standards including OAuth 2.0, OIDC, SAML, and SCIM.
Experience building and maintaining CI/CD pipelines using tools like Buildkite.
Experience with Infrastructure as Code (IaC) and automation tools such as Terraform.
Experience with cloud-native development, preferably on AWS.
Hands-on experience extending and integrating CIAM platforms like Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C.
Strong security fundamentals including access control models, token handling, encryption, and MFA.

Similar roles

Staff CIAM Software Engineer

Affirm

Remote 30 days ago $230,000–$290,000

Python Kotlin AWS Kubernetes MySQL Spark OAuth 2.0 OIDC SAML SCIM Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C Buildkite GitHub

5+ yrs exp Remote

Save

ICAM Architect

Booz Allen Hamilton

McLean, VA 64 days ago $86,800–$198,000

Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Zero Trust MFA Saviynt Sailpoint Omada Oracle IAM CI/CD AWS Cognito Azure AD B2C Keycloak Google Cloud Identity

Save