Senior CIAM Software Engineer

Affirm

Remote

Quick summary

Work type: Remote
Location: Remote
Salary: $195,000–$255,000 / yr
Posted: 50 days ago

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $187k

This role $225k

$139k most similar roles pay here $267k

This role pays more than 83% of similar roles. Most pay $151,475–$222,000 — the shaded band above. At the midpoint, this role pays about $225k versus about $187k for comparable roles.

Based on 240 similar postings.

Employer

About Affirm

Affirm is a buy-now, pay-later (BNPL) financial technology company that offers point-of-sale installment loans to consumers, allowing them to split purchases into fixed monthly payments with transparent terms. Industry: Financial Technology & Consumer Lending

Affirm currently has 57 open roles on FindRole.

Listed pay typically runs $195,000–$255,000 across 57 roles with salary data.

Most-posted roles

View all roles at Affirm

At a glance

TL;DR · Senior CIAM Software Engineer

Apply Now Log in to save

As a Senior CIAM Software Engineer at Affirm, you will join the Information Security team to design and implement core customer identity and authentication (CIAM) capabilities. Your daily tasks include building backend services for registration, login, authorization, and account lifecycle management across both B2C and B2B platforms using Python and Kotlin. You will also integrate CIAM systems with internal infrastructure, automate deployments, and ensure robust security practices are in place. The role requires expertise in OAuth 2.0, OIDC, SAML, SCIM, and cloud-native development on AWS, along with experience in Infrastructure as Code tools like Terraform and CI/CD pipelines. This high-scale environment demands a solid understanding of distributed systems and API design principles to deliver secure, reliable identity services that support Affirm’s growth.

Skills

Python Kotlin OAuth 2.0 OIDC SAML SCIM CI/CD GitHub Buildkite AWS Terraform Okta Auth0 Ping Identity ForgeRock Azure AD B2C Cursor

What you'll do

Design and build core CIAM backend services for customer registration, authentication, and account lifecycle.
Implement identity standards like OAuth 2.0, OIDC, SAML, and SCIM in code to ensure security and scalability.
Develop Python and Kotlin APIs that expose identity capabilities to various applications and platforms.
Integrate CIAM systems with internal user data stores, messaging services, and fraud detection mechanisms.
Own secure authentication flows end-to-end, including multi-factor authentication (MFA) and adaptive logic.

What we're looking for

5+ years of professional backend software engineering experience.
Strong expertise in designing and implementing CIAM systems with OAuth 2.0, OIDC, SAML, SCIM.
Proficiency in Python or similar backend languages for production environments.
Experience building APIs, automation frameworks, and distributed systems.
Hands-on with extending and integrating CIAM platforms using custom code and APIs.
Solid understanding of security fundamentals applied through engineering practices.