Senior Staff Product Security Engineer (Consumer Identity & Access Management)
Remote US
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest.
Affirm values information security as a critical part of the company’s continued success. Our mission is to make information security programmatic and cultural in Affirm, enabling the company to succeed in building honest financial products. The Security team posture increases security and reduces risk while securely enabling access to information for those who need it!
As the Senior Staff Security Engineer for the Consumer Identity & Access Management Program, you will be responsible for leading the design and implementation of robust, secure, and scalable identity management solutions across multiple product lines at Affirm. You will play a key role in ensuring that our applications and services are protected by implementing best practices in authentication, authorization, and user management. Your expertise will help shape our security posture, influence Affirm’s identity strategy, and guide development teams in building a modern CIAM platform.
What you’ll do
-
Own and drive the Consumer Identity & Access Management (CIAM) roadmap for all external identities which includes, consumers, merchant, partners.
-
Performing threat modeling and security architecture reviews for identity product features.
-
Provide technical leadership and mentorship to team members on identity standards and security best practices
-
Participating in the strategic development of methods, techniques, and evaluation criteria for identity related projects and programs
-
Partner with Affirm product teams to design authentication and authorization solutions across multiple product lines.
-
Collaborate with engineering teams across the organization to build, support, and enhance authentication and authorization platforms, driving engineering excellence and operational efficiency.
-
Partner with product teams in the development of security focused test cases to enforce security requirements.
-
Perform code reviews and provide constructive feedback to peers.
What we look for
-
10+ years of experience architecting CIAM solutions authentication or authorisation protocols (OAuth, OAuth2, OIDC, SAML, LDAP)
-
Experience designing and building distributed systems and applications, real-time, scalable web services, REST APIs, developer portals.
-
Track record of successfully launching CIAM Programs with complex use cases across multiple identity types.
-
Experience integrating Identity COTS Products, such as Auth0, AWS Cognitos, Okta, etc. …
This job isn't fresh anymore!
Search Fresh JobsJob Profile
Limited number of roles remain office-based Remote US
Benefits/Perks100% subsidized medical 100% subsidized medical coverage Competitive benefits Dental and vision coverage Employee stock purchase plan Equity rewards ESPP Flexible Spending Flexible Spending Wallets Health care coverage Inclusive interview experience Inclusive interview experience for all Monthly stipends Monthly stipends for health Monthly stipends for health, wellness, and tech spending Remote-first company Subsidized medical coverage Tech spending Time off Transparent pay structure Wellness Wellness and tech spending
Tasks- Collaborate with engineering teams
- Conduct code reviews
- Design
- Perform code reviews
- Provide technical leadership
- Provide technical leadership and mentorship
Authentication Authorization AWS Distributed Systems Identity Management Information security IOS Kotlin LDAP Leadership Mobile app development Modeling OAUTH OAuth2 OIDC Organization Product Security Python R REST REST APIs SAML Security Architecture Strategy Swift Technical Leadership Web Web Services
Experience10 years
EducationBachelor's degree Engineering Equivalent practical experience Related Field
TimezonesAmerica/Anchorage America/Chicago America/Denver America/Los_Angeles America/New_York Pacific/Honolulu UTC-10 UTC-5 UTC-6 UTC-7 UTC-8 UTC-9