Staff CIAM Software Engineer

Affirm

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Salary
$230,000–$290,000 / yr
Posted
30 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $223k
This role $260k
$160k most similar roles pay here $304k

This role pays more than 82% of similar roles. Most pay $192,007–$254,562 — the shaded band above. At the midpoint, this role pays about $260k versus about $223k for comparable roles.

Based on 240 similar postings.

Employer

About Affirm

Affirm is a buy-now, pay-later (BNPL) financial technology company that offers point-of-sale installment loans to consumers, allowing them to split purchases into fixed monthly payments with transparent terms. Industry: Financial Technology & Consumer Lending

Affirm currently has 60 open roles on FindRole.

Listed pay typically runs $195,000–$255,000 across 60 roles with salary data.

Most-posted roles

View all roles at Affirm

At a glance

TL;DR · Staff CIAM Software Engineer

Staff CIAM Software Engineer joins the Information Security team to design and ship core customer identity and authentication capabilities. This hands-on role involves building and operating backend services for registration, login, authorization, and account lifecycle flows across B2C and B2B platforms. The engineer will implement identity standards such as OAuth 2.0, OIDC, SAML, and SCIM while developing APIs in Python and Kotlin to expose capabilities to web, mobile, and partner applications. Key responsibilities include integrating CIAM platforms with internal systems, managing MFA and adaptive authentication logic, and automating infrastructure using Infrastructure as Code and CI/CD pipelines. The role requires expertise in AWS, MySQL, Spark, Kubernetes, and Terraform, alongside experience with tools like Buildkite and GitHub. The work focuses on solving complex identity problems by ensuring security fundamentals, reliability, and performance in high-scale environments.

What you'll do

  • Design, build, and operate core CIAM backend services for registration, authentication, authorization, and account lifecycle management.
  • Implement and extend identity standards including OAuth 2.0, OIDC, SAML, and SCIM in code.
  • Develop backend APIs and services using Python and Kotlin to expose identity capabilities to web and mobile platforms.
  • Integrate CIAM platforms with internal systems such as user data stores, messaging, and fraud signals.
  • Own secure authentication flows including MFA, step-up authentication, device binding, and adaptive logic.
  • Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD pipelines.
  • Monitor, debug, and optimize services for performance, resilience, and abuse detection in high-scale environments.

What we're looking for

  • 7+ years of experience designing, developing, and launching backend systems at scale using Python or Kotlin.
  • 5+ years of professional backend software engineering experience.
  • Extensive track record of developing highly available distributed systems using AWS, MySQL, Spark, and Kubernetes.
  • Deep hands-on knowledge of identity standards including OAuth 2.0, OIDC, SAML, and SCIM.
  • Experience building and maintaining CI/CD pipelines and Infrastructure as Code using tools like Terraform.
  • Strong security fundamentals including access control models, token handling, encryption, and MFA.
  • Experience integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C.
  • Familiarity with tools such as Cursor and other AI-augmented development environments (preferred).

More like this

Similar roles

Senior CIAM Software Engineer

Affirm

Remote 155 days ago $195,000$255,000
OAuth 2.0 OIDC SAML SCIM Python Kotlin AWS Terraform CI/CD Infrastructure as Code Okta Auth0 Ping Identity ForgeRock Azure AD B2C API Design Distributed Systems Buildkite GitHub
5+ yrs exp Remote

Staff Software Engineer

Circle

Remote (San Francisco, CA) +11 28 days ago $195,000$257,500
Go Java Blockchain Web3 RESTful API Microservices AWS Google Cloud Microsoft Azure Kubernetes EKS ECS SQL NoSQL System Design
7+ yrs exp Remote

Staff Software Engineer

PayPal

Austin, TX +1 9 days ago $160,500$238,700
Python RDBMS NoSQL Redis ElastiCache Hazelcast SQS Kafka RabbitMQ Pulsar AWS GCP Azure Terraform SDLC
5+ yrs exp Hybrid

Staff Software Engineer

Warner Bros. Discovery

Remote (Atlanta, GA) 66 days ago
AWS JavaScript Docker Git API Design Data Modeling Scrum Kanban Cloud-native State Management Algorithms Data Structures
8+ yrs exp Remote

Staff Software Engineer

Cisco

Remote (Durham, NC) 42 days ago $151,600$222,400
AWS GCP Azure Kubernetes Go Python Java Distributed Systems CI/CD Microservices REST RAG Multi-agent Frameworks
8+ yrs exp Remote

Staff Software Engineer

The Hartford

Hartford, CT +3 42 days ago $116,000$174,000
Generative AI Prompt Engineering AWS GCP Azure Python C# .NET Java Go Angular React Node.js RESTful APIs Microservices SQL Server Snowflake PostgreSQL MongoDB CI/CD
8+ yrs exp Hybrid