Software Engineer II - CIAM

Description

The company is building its next generation of customer identity and authentication. This is a hands-on mid-level engineering role on the Information Security team, working on core CIAM capabilities that protect customers and support growth.

You will help build and run backend services behind sign-up, sign-in, authorization, and account lifecycle flows for both consumer (B2C) and business (B2B) users. You will pick up scoped identity features alongside experienced engineers and partner teams, with a focus on strong security, reliability, and operational discipline.

Responsibilities

• Build and release customer-facing authentication features, such as easier login, MFA, step-up authentication, and device binding, with mentoring from senior engineers.
• Write backend services and APIs in Python or Kotlin that turn product requirements into working code customers use to access their accounts securely.
• Integrate modern identity platforms such as Okta, Auth0, and ForgeRock, writing custom code that connects them to web, mobile, and partner applications.
• Carry scoped features through the development lifecycle: help with design, write clear code and automated tests, take part in code reviews, and deploy to production with team support.
• Debug services and improve reliability, using logs and metrics to see how your code performs in production.
• Work with engineering and product colleagues, apply secure development practices, and build your skills in software engineering and authentication.

Requirements

• You bring solid engineering fundamentals, an interest in authentication, and a drive to learn customer identity. Prior CIAM experience is not expected.
• You have written, tested, and debugged software in Python, Kotlin, or a similar language, through coursework, internships, personal projects, open source, or paid work. No fixed number of years is required.
• You understand backend basics: APIs, data structures, databases, and version control.
• You are curious about how authentication works and want to build secure, reliable customer experiences. Experience with identity protocols or CIAM platforms is a plus, not a requirement.
• You solve problems pragmatically, ask questions when you need to, and welcome learning through mentoring and code review.
• You communicate clearly and work well with engineering, product, and security colleagues.

Conditions

Base pay grade: L. Equity grade: Canada 5.

Canada base pay range: $133,000 to $183,000 CAD per year.

New hires usually start near the bottom of the pay range. Pay is set using location, experience, and job-related skills.

Base pay is part of total compensation, which may include monthly stipends for health, wellness, and tech spending, plus benefits. You may also be eligible for equity from the parent company, the company Holdings, Inc.

This is a remote role open only to residents of Alberta, British Columbia, Manitoba, New Brunswick, Newfoundland and Labrador, Nova Scotia, Ontario, Prince Edward Island, or Saskatchewan.

The company is remote-first. Most roles can be done from almost anywhere in the country of employment, though some require occasional in-person work and a few are office-based. All new hires are invited to an in-person onboarding.

Accommodations are available for candidates with disabilities during the interview process, and for San Francisco or Los Angeles roles, qualified applicants with arrest and conviction records are considered as required by law.

Benefits

• Health coverage at no cost to you: the company pays 100% of premiums for you and your dependents.
• Monthly stipends for your tech setup and for health and wellness options that suit you.
• Flexible time off and a generous holiday calendar.
• An employee stock purchase plan (ESPP) that lets you buy company stock at a discount.