
Remote opportunity at
AffirmProduct Security Engineer II - IAM
Affirm operates a financial platform designed to give consumers predictable payment alternatives without hidden fees or unexpected charges. Within the organization, the InfoSec department safeguards corporate…
Career Tools
About This Role
Affirm operates a financial platform designed to give consumers predictable payment alternatives without hidden fees or unexpected charges. Within the organization, the InfoSec department safeguards corporate systems against emerging threats, oversees risk management, enforces protective guidelines, and directs identity and access management. The company is currently hiring a Product Security Engineer II - IAM to develop next-generation enterprise identity and access management infrastructure. This position merges operational IAM duties, automation…
Job Description
Affirm operates a financial platform designed to give consumers predictable payment alternatives without hidden fees or unexpected charges. Within the organization, the InfoSec department safeguards corporate systems against emerging threats, oversees risk management, enforces protective guidelines, and directs identity and access management. The company is currently hiring a Product Security Engineer II - IAM to develop next-generation enterprise identity and access management infrastructure.
This position merges operational IAM duties, automation workflows, and production software engineering to enhance the scalability and dependability of identity solutions. The professional in this role will maintain core access lifecycle procedures, resolve production incidents, eliminate manual tasks, and construct backend services, APIs, and integrations linking identity tools with internal networks. The work centers heavily on SailPoint and enterprise identity integrations, along with Auth0 tasks where enterprise infrastructure meets customer identity.
Affirm functions as a remote-first enterprise. This remote vacancy is open exclusively to individuals living in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan. Total compensation encompasses a base salary scale, potential equity awards from Affirm Holdings, Inc., monthly stipends for wellness, health, and technology expenses, and fully covered medical, dental, and vision insurance premiums for workers and their families.
Responsibilities
- Manage and enhance identity and access management operations, covering access lifecycle tasks, user requests, certifications, and problem resolution
- Automate repetitive duties utilizing scripts, services, and workflow enhancements
- Develop and sustain production-grade backend software, APIs, tests, and integrations
- Link SailPoint and workforce identity events to internal systems
- Create standardized pathways enabling Affirm personnel to generate modern internal utilities using Auth0
- Collaborate alongside Security, IT, and Engineering departments regarding secure and auditable modifications
- Maintain operational runbooks, performance metrics, and escalation assistance
Requirements
- Minimum of 2 years of software engineering background or comparable internship and co-op experience featuring robust projects
- Capacity to write, test, and run production-quality backend code in Python or a comparable language
- Solid foundations in APIs, debugging, logging, error handling, and distributed systems
- Experience with GitHub, continuous integration and deployment, testing, and code review
- Comfort managing operational tasks and debugging production challenges
- Familiarity with cloud architectures, with a preference for AWS
- Strong written communication and documentation capabilities
Qualifications
- Exposure to identity and access management, identity governance and administration, single sign-on, SAML, OIDC, SCIM, role-based access control, or identity governance
- Experience working with SailPoint, Auth0, Okta, OneLogin, or comparable platforms
- Experience utilizing Terraform or other infrastructure-as-code utilities
- Familiarity operating within audit or compliance frameworks
Core Skills
Benefits
- 100% subsidized medical coverage for employees and their dependents
- Dental and vision insurance for employees and dependents
- Monthly spending stipends for technology, health, and wellness options
- Flexible time off and generous holiday calendars
- Employee stock purchase plan allowing discounted stock purchases in Affirm Holdings, Inc.
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary for the Product Security Engineer II - IAM position?
The annual base pay range for this role is CAD 133,000 to CAD 183,000, which forms part of a total compensation package including equity rewards and stipends.
Is this job remote?
Yes, Affirm operates as a remote-first enterprise. However, this specific remote vacancy is exclusively open to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.
What programming language is required?
Candidates must be able to write, test, and operate production-quality backend code in Python or a similar language.
What experience is required for this role?
Applicants need 2 or more years of software engineering experience, or equivalent internship or co-op experience with strong projects.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.