Product Security Engineer II - CIAM

Affirm

21h • $146,000 - $225,000 • Remote

About The Position

Affirm is hiring a hands-on, mid-level engineer in Information Security to help build the next generation of customer identity and authentication. The role contributes to core customer identity and access management (CIAM) capabilities that protect customers and support growth. You will build and maintain backend services for registration, login, authorization, and account lifecycle flows across B2C and B2B experiences, working with experienced engineers and partner teams to deliver scoped identity features with strong security fundamentals, reliability, and operational rigor.

The position involves building customer-facing authentication features such as login improvements, multifactor authentication, step-up authentication, and device binding. You will develop backend services and APIs in Python or Kotlin, and work with identity technologies including Okta, Auth0, and ForgeRock. With team support, you will contribute to feature design, write readable code and automated tests, participate in code reviews, deploy to production, debug services, and use logs and metrics to improve reliability. The role offers mentorship and opportunities to grow software engineering skills and expertise in authentication.

The position requires either equivalent practical experience or a bachelor's degree in a related field. Affirm is remote-first; most roles can be performed from almost anywhere within the country of employment, though some roles may occasionally require office attendance. New hires are invited to attend in-person onboarding.

Requirements

• Ability to write, test, and debug software in Python, Kotlin, or a similar language, demonstrated through coursework, internships, personal projects, open source, or professional work.
• Foundational understanding of backend development, including APIs, data structures, databases, and version control.
• Curiosity about authentication and motivation to build secure, reliable customer experiences.
• Practical problem-solving skills, willingness to ask questions, and openness to learning through mentorship and code review.
• Clear communication and ability to collaborate with engineering, product, and security teammates.
• Equivalent practical experience or a bachelor's degree in a related field.

Nice To Haves

• Prior experience with identity protocols or CIAM platforms.

Responsibilities

• Build and ship customer-facing authentication features, including login improvements, MFA, step-up authentication, and device binding.
• Develop backend services and APIs in Python or Kotlin, translating product requirements into working software.
• Write custom code and integrations for identity technologies such as Okta, Auth0, and ForgeRock, connecting identity capabilities to web, mobile, and partner applications.
• Contribute to feature design, write readable code and automated tests, participate in code reviews, and deploy features to production with team support.
• Debug services, improve reliability, and use logs and metrics to understand production behavior.
• Collaborate with engineering, product, and security partners while developing secure software and growing expertise in authentication.

Benefits

• 100% subsidized medical coverage for employees and their dependents.
• Dental and vision coverage for employees and their dependents.
• Monthly stipends for technology, health, and wellness spending.
• Flexible time off and generous holiday calendars.
• Employee stock purchase plan allowing employees to buy Affirm stock at a discount.
• In-person onboarding experience for new hires.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level