Senior CIAM Software Engineer

Role Overview

Join Affirm as a Senior CIAM Software Engineer within Information Security. You will design, build, and operate core Customer Identity and Access Management (CIAM) backend services that power registration, authentication, authorization, account lifecycle, and profile management for B2C and B2B platforms.

Responsibilities

• Design, build, and operate core CIAM backend services for customer identity journeys (registration, auth, authz, account lifecycle, and profiles).
• Implement and extend identity standards in code, ensuring correctness, scalability, and clean integration patterns:
  • OAuth 2.0, OIDC, SAML, SCIM
• Treat identity as a core platform service by automating infrastructure and deployments.
• Automate CIAM infrastructure and releases using Infrastructure as Code and CI/CD pipelines.
• Work closely with partner engineering teams to deliver identity features with strong security fundamentals, reliability, and operational rigor.

Requirements

• 5+ years of professional backend software engineering experience.
• Strong API design, distributed systems, and automation experience.
• Deep, hands-on CIAM expertise beyond configuration, including:
  • OAuth 2.0, OIDC, SAML, SCIM
• Hands-on experience building and maintaining CI/CD pipelines.
• Strong security fundamentals applied through engineering, including:
  • access control models, token handling, encryption, MFA, privacy by design
• Solid backend/distributed systems fundamentals: data modeling, latency, error handling, and observability.
• Experience with Infrastructure as Code (e.g., Terraform) and CI/CD for deploying backend services.
• Production experience in Python (or a similar backend language).
• Cloud-native development experience, preferably AWS.
• GitHub-based workflows and build systems such as Buildkite (or similar).

Nice to Have

• Experience integrating/extending CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C (custom code, hooks, and APIs).
• Familiarity with AI-augmented development environments (e.g., Cursor).
• Ability to communicate clearly and partner effectively with product, frontend, mobile, and security teams.