Product Security Engineer II - CIAM

• At Affirm, we exist for the moments that matter—giving people a clear, predictable way to pay over time, with no hidden fees, no surprises, and no tradeoffs on what matters most.
• Affirm is building the next generation of customer identity and authentication. This role is a hands-on, mid-engineering position inside Information Security, contributing to core CIAM capabilities that protect customers and support growth.
• You will help build and maintain backend services that power registration, login, authorization, and account lifecycle flows across B2C and B2B experiences.
• You will work with experienced engineers and partner teams to deliver scoped identity features with strong security fundamentals, reliability, and operational rigor.

What you'll do

• Build and ship customer-facing authentication features—from smoother login experiences to MFA, step-up authentication, and device binding—with mentorship from experienced engineers.
• Develop backend services and APIs in Python or Kotlin, turning product

requirements

into working software that helps customers access their accounts securely.

• Work with modern identity technologies such as Okta, Auth0, and ForgeRock, writing custom code and integrations that connect identity capabilities to web, mobile, and partner applications.
• Take scoped features through the software development lifecycle: contribute to design, write readable code and automated tests, participate in code reviews, and deploy to production with support from the team.
• Solve real engineering problems by debugging services, improving reliability, and using logs and metrics to understand how your code behaves in production.
• Collaborate with engineering and product partners, learn secure development practices, and grow your software engineering skills while building expertise in authentication.

What we look for

• We're looking for a Mid-Level Software Engineer with solid engineering fundamentals, a passion for authentication, and an eagerness to learn customer identity and access management.
• You do not need extensive authentication or CIAM experience—we value your ability to build software, solve problems, and grow in the space.

• Demonstrated ability to write, test, and debug software in Python, Kotlin, or a similar language through coursework, internships, personal projects, open source, or professional work. No fixed minimum years of experience required.
• Foundational understanding of backend development, including APIs, data structures, databases, and version control.
• Genuine curiosity about how authentication works and motivation to build secure, reliable customer experiences. Prior experience with identity protocols or CIAM platforms is a plus, not a requirement.
• A practical problem-solving approach, willingness to ask questions, and openness to learning through mentorship and code review.
• Clear communication and the ability to collaborate with engineering, product, and security teammates.
• This position requires either equivalent practical experience or a Bachelor's degree in a related field.

Base Pay Grade - L

Equity Grade - 6

• Employees new to Affirm typically come in at the start of the pay range. Affirm focuses on providing a simple and transparent pay structure which is based on a variety of factors, including location, experience and job-related skills.
• Base pay is part of a total compensation package that may include equity rewards, monthly stipends for health, wellness and tech spending, and benefits (including 100% subsidized medical coverage, dental and vision for you and your dependents.)
• USA base pay range (CA, WA, NY, NJ, CT) per year: $165,000 - $225,000
• USA base pay range (all other U.S. states) per year: $146,000 - $206,000

#LI-Remote

Remote-first with flexibility built in

• Affirm is proud to be a remote-first company.
• Most roles can be done from almost anywhere within the country of employment.
• Some positions may occasionally require in-person work at an Affirm office, and a few are office-based due to the nature of the work.
• All new hires will be invited to attend an in-person onboarding experience.

Benefits

designed for you

Our benefits reflect our commitment to care, transparency, and flexibility. Here are a few highlights:

• Health coverage at no cost: We cover 100% of premiums for employees and their dependents.
• Spending stipends: Monthly stipends support your tech setup, and the ability to choose health and wellness options that are right for you.
• Time off to recharge: Flexible time off and generous holiday calendars help you rest when you need to.
• Own a piece of what you build: Our employee stock purchase plan (ESPP) lets you buy Affirm stock at a discount.

• We're committed to providing an inclusive interview process, including accommodations for candidates with disabilities. If you need support, we're happy to help.
• For positions based in San Francisco or Los Angeles: Affirm considers qualified applicants with arrest and conviction records, as required by law.
• By clicking "Submit Application," you acknowledge that you have read Affirm's Global Candidate Privacy Notice and consent to the use of your personal information as described.