Enterprise IAM Software Engineer II
Affirm Voir toutes les offres
- Canada
- 125.000-175.000 $ par an
- Stage
- Temps-plein
- Support the daily operations of our enterprise IAM program, including intake, triage, and execution of access lifecycle work
- Run and improve core IAM processes (joiner/mover/leaver, access requests, certifications, and break-glass patterns)
- Partner with Security, IT, and Engineering stakeholders to coordinate changes with clear ownership, approvals, and auditability
- Troubleshoot and resolve IAM-related issues, including access failures, provisioning bugs, and workflow errors
- Write and maintain scripts and small services that automate repetitive IAM tasks and reduce manual effort
- Contribute backend code and bug fixes in our IAM automation codebase (including tests and safe rollout practices)
- Help document runbooks, standard operating procedures, and operational metrics for the program
- Participate in on-call or escalation rotations as needed for IAM-owned systems
- Debugging a provisioning workflow that intermittently fails and adding monitoring + automated retries
- Writing a script to reconcile access between source systems and SailPoint
- Improving a Jira intake workflow so requests are validated and routed correctly before execution
- Building a small API integration to connect an internal system to identity lifecycle events
- 2+ years of professional software engineering experience (or equivalent internship/co-op experience with strong projects)
- Ability to write production-quality code in Python or a similar backend language
- Comfort working with operational processes, tickets/requests, and cross-functional stakeholders
- Experience with APIs, scripting, and debugging distributed systems issues
- Familiarity with CI/CD and GitHub-based workflows
- Familiarity with cloud environments (AWS preferred)
- Strong written communication and documentation habits
- Any exposure to IAM/IGA/SSO concepts (e.g., SAML/OIDC, SCIM, RBAC)
- Experience with SailPoint, Auth0, Okta, OneLogin, or similar identity platforms
- Experience with infrastructure as code (Terraform or similar)
- Familiarity with compliance/audit-driven environments (SOC 2, SOX, ISO, PCI)
- Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
- Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
- Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
- ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount