Staff CIAM Software Engineer

Accountabilities:

• Design, build, and operate core CIAM backend services supporting customer registration, authentication, authorization, account lifecycle, and profile management across B2C and B2B platforms.
• Implement and extend identity standards including OAuth 2.0, OIDC, SAML, and SCIM while ensuring correctness, scalability, security, and clean integration patterns.
• Develop backend APIs and services using Python and Kotlin to expose identity capabilities to web, mobile, and partner applications.
• Integrate CIAM platforms with internal systems such as user data stores, messaging systems, fraud signals, and downstream customer platforms.
• Own secure authentication and account flows end to end, including MFA, step-up authentication, device binding, consent management, and adaptive authentication.
• Automate CIAM infrastructure and deployments using Infrastructure as Code and CI/CD practices, treating identity capabilities as core platform services.
• Monitor, troubleshoot, and optimize identity services for performance, availability, resilience, observability, and abuse detection in high-scale environments.
• Define technical and execution plans for major features, system components, and the retirement of existing functionality.
• Establish and maintain high-quality, readable, maintainable code that can be effectively used and extended by other engineers.
• Work closely with global engineering, product, frontend, mobile, and security teams to deliver identity capabilities that meet both business and security requirements.

Requirements:

• You have 7+ years of experience designing, developing, and launching backend systems at scale, with strong professional experience in Python, Kotlin, or a comparable backend language.
• You have a strong track record of building and operating highly available distributed systems using technologies such as AWS, MySQL, Spark, and Kubernetes.
• You have deep, hands-on experience designing and implementing CIAM systems and applying OAuth 2.0, OIDC, SAML, and SCIM beyond basic platform configuration.
• You have at least 5 years of professional backend software engineering experience and strong production experience with Python or a similar backend language.
• You have experience designing APIs, automation frameworks, distributed systems, and cloud-native services.
• You have hands-on experience building and maintaining CI/CD pipelines, GitHub-based development workflows, and Buildkite or comparable build systems.
• You have practical experience extending and integrating CIAM platforms such as Okta, Auth0, Ping Identity, ForgeRock, or Azure AD B2C through custom code, hooks, and APIs.
• You have a solid understanding of distributed-systems fundamentals, including API design, data modeling, latency, error handling, scalability, and observability.
• You have experience with Infrastructure as Code and automation tools such as Terraform, along with CI/CD pipelines for backend service deployment.
• You apply strong security engineering principles, including access control, token handling, encryption, MFA, privacy by design, and secure authentication patterns.
• You can define technical approaches for complex initiatives, execute independently, and produce high-quality code and systems that can be maintained by other engineers.
• You communicate clearly and collaborate effectively with global teams while taking ownership of backend identity services.
• Familiarity with Cursor or other AI-augmented development environments is beneficial.

Benefits:

• The Canadian base salary range is $181,000–$241,000 per year, with compensation determined by factors such as location, experience, and job-related skills.
• The total compensation package may include equity rewards in addition to base pay.
• Employees may receive monthly stipends for health, wellness, technology, and other eligible expenses.
• Medical coverage is fully subsidized, with dental and vision coverage available for employees and their dependents.
• Flexible Spending Wallets provide allowances for technology, food, lifestyle needs, and family-forming expenses.
• Competitive vacation and holiday schedules support time away for rest and recharge.
• An employee stock purchase plan provides the opportunity to purchase company shares at a discount.
• The organization operates with a remote-first approach, with most roles offering the flexibility to work remotely within the country of employment.
• Reasonable accommodations are available to support an inclusive interview experience for candidates with disabilities.