Product Security Engineer II - IAM
New
A
AffirmIdentity and access management
This remote role is open only to candidates residing in Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.Full-TimeMiddle
Salary133,000 - 183,000 CAD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 2+ years of software engineering experience or equivalent internship/co-op experience with strong projects
- Required Skills
- AWSPythonCI/CDRESTful APIsGitHubDistributed Systems
Requirements
- Have 2+ years of software engineering experience or equivalent internship/co-op experience with strong projects.
- Write, test, and operate production-quality backend code in Python or a similar language.
- Have strong foundations in APIs, debugging, logging, error handling, and distributed systems.
- Have experience with GitHub, CI/CD, testing, and code review.
- Be comfortable owning operational work and troubleshooting production issues.
- Be familiar with cloud environments; AWS is preferred.
- Have strong written communication and documentation skills.
- IAM, IGA, SSO, SAML, OIDC, SCIM, RBAC, or identity governance exposure is a plus.
- Experience with SailPoint, Auth0, Okta, OneLogin, or similar platforms is a plus.
- Experience with Terraform or other infrastructure-as-code tools is a plus.
- Familiarity with audit or compliance environments is a plus.
Responsibilities
- Run and improve IAM operations, including access lifecycle work, requests, certifications, and issue resolution.
- Automate repetitive processes with scripts, services, and workflow improvements.
- Build and maintain production backend software, APIs, tests, and integrations.
- Connect SailPoint and workforce identity events with internal systems.
- Build a paved path that enables Affirm employees to create modern internal tools with Auth0.
- Partner with Security, IT, and Engineering on secure, auditable changes.
- Maintain runbooks, operational metrics, and escalation support.
- Fix provisioning workflows and add monitoring or retries.
- Reconcile access between source systems and SailPoint.
- Build API integrations for identity lifecycle events and create reusable Auth0 patterns, tooling, and documentation for internal applications.
View Full Description & ApplyYou'll be redirected to the employer's site
