SSO Integrations

eBayToronto, ON
CA$124,000 - CA$165,500

About The Position

eBay is seeking a Senior Single Sign-On (SSO) & Identity and Access Management (IAM) Engineer to join our Identity & Security team. In this role, you will design, secure, and scale the identity fabric that powers eBay's internal workforce & massive partner network. We are looking for a deeply technical, hands-on expert—high-caliber engineers who possesses a track record of untangling complex federated identity issues, optimizing session management, and driving seamless integrations across diverse enterprise and cloud infrastructures.

Requirements

  • 5–8+ years of dedicated engineering experience within the Identity and Access Management (IAM) space, with a sharp focus on Single Sign-On.
  • Deep hands-on proficiency with PingFederate /EntraID similar products for policy tree configuration, and custom token generation.
  • Thorough knowledge of lower-level network routing, load balancing (F5/NGINX), and HTTP/HTTPS protocol mechanics.
  • Proven experience connecting SaaS platforms, Developer APIs (eBay Developer Program tools), and traditional on-prem enterprise applications into unified auth pipelines.
  • Strong capability in scripting (Python, PowerShell, or Bash) to automate configuration deployments, log parsing, and routine health checks.
  • Bachelor’s degree in Computer Science, Cyber Security, Information Systems, or a related technical field (or equivalent practical experience).

Responsibilities

  • Architect, deploy, and support robust enterprise-grade SSO solutions across eBay's corporate and partner-facing applications utilizing SAML 2.0, OAuth 2.0, OIDC, and WS-Federation, SCIM, and LDAP.
  • Act as the primary subject matter expert for enterprise identity stacks, with a heavy emphasis on the Ping Identity Suite (PingFederate, PingProtect, PingID), or equivalent hybrid platforms (e.g., EntraID).
  • Diagnose and resolve complex, intermittent infrastructure and network-level authentication challenges (such as TCP resets at authenticator endpoints, certificate mismatches, and session idle timeout expirations).
  • Partner with internal software engineering squads to integrate multi-tiered environments securely into the SSO fabric.
  • Actively monitor and analyze server-level logs, configure trace debugging, and interpret SAML assertions or OAuth tokens to preemptively catch and resolve edge-case authentication failures.
  • Ensure identity policies map seamlessly to modern Zero Trust standards, enforcing Contextual Multi-Factor Authentication (MFA), step-up authentication, and adaptive risk engine rules without compromising user friction.
  • Respond promptly to production issues by serving on an on-call rotation for the 24-hour support of the team's systems as well as providing escalation support as needed to the other team members.

Benefits

  • Target bonus
  • Restricted stock units
  • Medical benefits
  • Financial benefits
  • RRSP eligibility
  • Various paid time off benefits, such as PTO and parental leave
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service