Enterprise IAM Software Engineer II

About This RoleAI processing…

Key Responsibilities

• 1
  Support the daily operations of our enterprise IAM program, including intake, triage, and execution of access lifecycle work
• 2
  Run and improve core IAM processes (joiner/mover/leaver, access requests, certifications, and break-glass patterns)
• 3
  Partner with Security, IT, and Engineering stakeholders to coordinate changes with clear ownership, approvals, and auditability
• 4
  Troubleshoot and resolve IAM-related issues, including access failures, provisioning bugs, and workflow errors
• 5
  Write and maintain scripts and small services that automate repetitive IAM tasks and reduce manual effort
• 6
  Contribute backend code and bug fixes in our IAM automation codebase (including tests and safe rollout practices)
• 7
  Help document runbooks, standard operating procedures, and operational metrics for the program
• 8
  Participate in on-call or escalation rotations as needed for IAM-owned systems
• 9
  Debugging a provisioning workflow that intermittently fails and adding monitoring + automated retries
• 10
  Writing a script to reconcile access between source systems and SailPoint
• 11
  Improving a Jira intake workflow so requests are validated and routed correctly before execution
• 12
  Building a small API integration to connect an internal system to identity lifecycle events

Requirements

• 2+ years of professional software engineering experience (or equivalent internship/co-op experience with strong projects)
• Ability to write production-quality code in Python or a similar backend language
• Comfort working with operational processes, tickets/requests, and cross-functional stakeholders
• Experience with APIs, scripting, and debugging distributed systems issues
• Familiarity with CI/CD and GitHub-based workflows
• Familiarity with cloud environments (AWS preferred)
• Strong written communication and documentation habits
• Any exposure to IAM/IGA/SSO concepts (e.g., SAML/OIDC, SCIM, RBAC)
• Experience with SailPoint, Auth0, Okta, OneLogin, or similar identity platforms
• Experience with infrastructure as code (Terraform or similar)
• Familiarity with compliance/audit-driven environments (SOC 2, SOX, ISO, PCI)
• Health care coverage - Affirm covers all premiums for all levels of coverage for you and your dependents
• Flexible Spending Wallets - generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
• Time off - competitive vacation and holiday schedules allowing you to take time off to rest and recharge
• ESPP - An employee stock purchase plan enabling you to buy shares of Affirm at a discount

Perks & Benefits