Senior Product Security Engineer

Overview

Job Description

Responsibilities

• - Architect and implement scalable CIAM solutions for both B2C and B2B platforms, integrating identity services such as registration, authentication, authorisation, and profile management.
• - Design and maintain identity federation and SSO integrations using standards like OAuth 2.0, OIDC, SAML, and SCIM to support customer and partner ecosystems.
• - Enhance customer experience by optimising secure login flows, progressive profiling, MFA/biometric adoption, and adaptive authentication mechanisms.
• - Develop and maintain APIs enabling seamless integration of CIAM capabilities across web, mobile, and partner applications.
• - Collaborate with security and compliance teams to ensure adherence to privacy regulations (GDPR, CCPA) and implement identity governance and consent management frameworks.
• - Automate CIAM infrastructure and workflows, leveraging DevOps practices, IaC (e.g., Terraform), and CI/CD pipelines to ensure reliability and repeatability.
• - Monitor and optimise performance and security posture, including threat detection, anomaly response, and continuous improvement of authentication systems.

Required Skills

• - Deep expertise in modern identity standards (OAuth 2.0, OIDC, SAML, SCIM) and proven experience implementing CIAM solutions across consumer and enterprise use cases.
• - Hands-on experience with leading CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C — including customization, integration, and lifecycle management.
• - Strong software engineering and automation background, with proficiency in APIs, RESTful services, scripting (Python, JavaScript, etc.), and Infrastructure as Code (Terraform, CloudFormation).
• - Security-first mindset with knowledge of best practices in identity governance, access controls, encryption, MFA, risk-based authentication, and compliance (GDPR, SOC 2, PCI).
• - Excellent written and verbal communication skills, with the ability to clearly explain complex identity concepts to both technical and non-technical audiences and collaborate effectively across teams.

Benefits

• - Type of employment: Contract of Employment
• - Flexible Spending Wallets for tech, food and lifestyle
• - Away Days - wellness days to take off work and recharge
• - Learning & Development programs
• - Parental benefits
• - Employee Resource & Community Groups
• - Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
• - Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
• - ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount