Support the daily operations of our enterprise IAM program, including intake, triage, and execution of access lifecycle work
Run and improve core IAM processes (joiner/mover/leaver, access requests, certifications, and break-glass patterns)
Partner with Security, IT, and Engineering stakeholders to coordinate changes with clear ownership, approvals, and auditability
Troubleshoot and resolve IAM-related issues, including access failures, provisioning bugs, and workflow errors
Write and maintain scripts and small services that automate repetitive IAM tasks and reduce manual effort
Contribute backend code and bug fixes in our IAM automation codebase (including tests and safe rollout practices)
Help document runbooks, standard operating procedures, and operational metrics for the program
Participate in on-call or escalation rotations as needed for IAM-owned systems

2+ years of professional software engineering experience (or equivalent internship/co-op experience with strong projects)
Ability to write production-quality code in Python or a similar backend language
Comfort working with operational processes, tickets/requests, and cross-functional stakeholders
Experience with APIs, scripting, and debugging distributed systems issues
Familiarity with CI/CD and GitHub-based workflows
Familiarity with cloud environments (AWS preferred)
Strong written communication and documentation habits

Health care coverage
Affirm covers all premiums for all levels of coverage for you and your dependents
Flexible Spending Wallets
generous stipends for spending on Technology, Food, various Lifestyle needs, and family forming expenses
Time off
competitive vacation and holiday schedules allowing you to take time off to rest and recharge
ESPP
An employee stock purchase plan enabling you to buy shares of Affirm at a discount

Enterprise IAM Software Engineer II

Key skills