Software Engineer II - CIAM

Description

The company offers a way to pay over time with clear terms, no hidden fees and no surprises.

The team sits within Information Security and is building the next generation of customer identity and login systems. This is a hands-on, mid-level engineering role.

You will help build and run backend services for sign-up, sign-in, access control and account lifecycle across consumer (B2C) and business (B2B) products. You will work alongside senior engineers and partner teams to ship scoped identity features with a focus on security, reliability and operational discipline.

Responsibilities

• Build customer-facing authentication features, such as MFA, step-up authentication and device binding, plus login improvements, with guidance from senior engineers.
• Write backend services and APIs in Python or Kotlin that turn product needs into working code, helping customers reach their accounts securely.
• Build custom code and integrations with identity platforms such as Okta, Auth0 and ForgeRock, connecting them to web, mobile and partner apps.
• Move scoped features through the development lifecycle: help with design, write clear, tested code, join code reviews and release to production with team support.
• Debug services and improve reliability, using logs and metrics to see how your code performs in production.
• Work with engineering and product colleagues, learn secure coding practices and build your skills in authentication.

Requirements

• Solid engineering fundamentals, interest in authentication and a wish to learn customer identity and access management. Prior authentication or CIAM experience is not expected; what matters is your ability to build, solve problems and grow.
• Proven ability to write, test and debug code in Python, Kotlin or a similar language, shown through coursework, internships, personal or open source projects, or paid work. No minimum number of years is required.
• Working knowledge of backend development, including APIs, data structures, databases and version control.
• Real curiosity about how authentication works and motivation to build secure, reliable experiences for customers.
• A practical approach to problems, willingness to ask questions and openness to learning through mentoring and code review.
• Clear communication and the ability to work with engineering, product and security colleagues.
• Either equivalent practical experience or a Bachelor's degree in a related field.
• Nice to have: prior experience with identity protocols or CIAM platforms. It is a plus, not a requirement.

Conditions

Base pay grade L and equity grade 6. New hires usually start at the bottom of the pay range. Pay is set by location, experience and job-related skills, within a transparent structure.

Base pay ranges are $165,000 to $225,000 per year in CA, WA, NY, NJ and CT, and $146,000 to $206,000 per year in all other U.S. states.

Base pay is part of total compensation, which may also include equity, monthly stipends and benefits.

Remote-first: most roles can be done from almost anywhere in the country of employment. Some roles may occasionally require in-office work, and a few are office-based. All new hires attend an in-person onboarding.

Accommodations are available for candidates with disabilities during interviews, and for San Francisco and Los Angeles roles, qualified applicants with arrest and conviction records are considered as required by law.

Benefits

• Health coverage with 100% of premiums covered for you and your dependents.
• 100% subsidized medical, dental and vision coverage for you and your dependents.
• Monthly stipends for tech setup, and for health and wellness options you choose.
• Flexible time off and generous holiday calendars.
• An employee stock purchase plan (ESPP) that lets you buy company stock at a discount.