Software Architect Cloud Security

At eBay were more than a global ecommerce leader were changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. Were committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

Our customers are our compass authenticity thrives bold ideas are welcome and everyone can bring their unique selves to work every day. Were in this together sustaining the future of our customers our company and our planet.

Join a team of passionate thinkers innovators and dreamers and help us connect people and build communities to create economic opportunity for all.

* This role cannot offer any sort of visa sponsorship *

About the team and the role:

The Identity team is responsible for building and evolving the foundational services that secure how people applications and platforms access eBay systems and experiences. This team partners broadly across engineering security and product organizations to deliver scalable resilient and modern identity capabilities that support a hybrid multi-cloud and SaaS ecosystem.

As a senior technical leader in the Identity domain this role will shape the future of authentication authorization federation and identity lifecycle management across eBay. You will serve as a trusted authority on enterprise IAM architecture define engineering standards embraced across teams and guide the invent of secure scalable and reliable identity solutions.

This role offers broad influence across platforms and roadmaps with the opportunity to mentor engineers elevate technical quality and help drive secure innovation in an AI-first environment.

What you will accomplish:

• Define and evolve enterprise-wide identity and access management architecture standards and reference implementations that improve consistency scalability and security across platforms.

• Own the design and adoption of modern authentication and federation solutions including OAuth 2.0 OpenID Connect SAML 2.0 FIDO2 WebAuthn and Passkeys to strengthen user and system trust.

• Establish secure authorization patterns for both user and service-to-service access including JWT mTLS and adaptive access models aligned with Zero Trust principles.

• Drive automation of identity lifecycle management through SCIM and federated identity models helping teams simplify provisioning strengthen governance and improve cross-domain interoperability.

• Influence technical direction across multiple teams by reviewing designs and code guiding platform decisions and ensuring identity services meet high standards for security correctness and reliability.

• Mentor engineers and partner with security product and platform leaders to set the standard on identity engineering develop roadmaps and embed guardrails and security checkpoints throughout the software development lifecycle.

What you will bring:

• 12 years of experience building large-scale distributed systems including 5 years as a technical lead or architect owning end-to-end identity or access management designs.
• Deep expertise in IAM technologies and standards including OAuth 2.0 OpenID Connect SAML and SCIM with experience designing federated or unified identity architectures.
• Strong experience building secure authentication authorization and federation solutions across distributed hybrid cloud multi-cloud or SaaS environments.
• Proven ability to influence technical strategy establish engineering standards and lead through collaboration across multiple teams and platforms.
• Familiarity with Zero Trust architectures adaptive access models such as RBAC and ABAC and areas such as identity verification risk-based authentication or trust signals.
• Bachelors degree in Computer Science Engineering or a related field or equivalent experience; experience operating in security-sensitive or regulated environments is a plus.

#LI-BB1

Additional Details

The base pay range for this position is expected in the range below:

Base pay offered may vary depending on multiple individualized factors including location skills and experience. The total compensation package for this position may also include other elements including a target bonus and restricted stock units (as applicable) in addition to a full range of medical financial and/or other benefits (including 401(k) eligibility and various paid time off benefits such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired employees will be in an at-will position and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time including for reasons related to individual performance Company or individual department/team performance and market factors.

Remote roles are not eligible for U.S. visa sponsorship.

eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race color religion national origin sex sexual orientation gender identity veteran status and disability or other legally protected you have a need that requires accommodation please contact us at . We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBays commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly please visit our Talent Privacy Notice Privacy Center and AI Hiring Guidelines .

Required Experience:

Staff IC