SSO Integrations

eBay•Toronto, ON

1d•CA$124,000 - CA$165,500

About The Position

eBay is seeking a Senior Single Sign-On (SSO) & Identity and Access Management (IAM) Engineer to join our Identity & Security team. In this role, you will design, secure, and scale the identity fabric that powers eBay's internal workforce & massive partner network. We are looking for a deeply technical, hands-on expert—high-caliber engineers who possesses a track record of untangling complex federated identity issues, optimizing session management, and driving seamless integrations across diverse enterprise and cloud infrastructures.

Requirements

5–8+ years of dedicated engineering experience within the Identity and Access Management (IAM) space, with a sharp focus on Single Sign-On.
Deep hands-on proficiency with PingFederate /EntraID similar products for policy tree configuration, and custom token generation.
Thorough knowledge of lower-level network routing, load balancing (F5/NGINX), and HTTP/HTTPS protocol mechanics.
Proven experience connecting SaaS platforms, Developer APIs (eBay Developer Program tools), and traditional on-prem enterprise applications into unified auth pipelines.
Strong capability in scripting (Python, PowerShell, or Bash) to automate configuration deployments, log parsing, and routine health checks.
Bachelor’s degree in Computer Science, Cyber Security, Information Systems, or a related technical field (or equivalent practical experience).

Responsibilities

Architect, deploy, and support robust enterprise-grade SSO solutions across eBay's corporate and partner-facing applications utilizing SAML 2.0, OAuth 2.0, OIDC, and WS-Federation, SCIM, and LDAP.
Act as the primary subject matter expert for enterprise identity stacks, with a heavy emphasis on the Ping Identity Suite (PingFederate, PingProtect, PingID), or equivalent hybrid platforms (e.g., EntraID).
Diagnose and resolve complex, intermittent infrastructure and network-level authentication challenges (such as TCP resets at authenticator endpoints, certificate mismatches, and session idle timeout expirations).
Partner with internal software engineering squads to integrate multi-tiered environments securely into the SSO fabric.
Actively monitor and analyze server-level logs, configure trace debugging, and interpret SAML assertions or OAuth tokens to preemptively catch and resolve edge-case authentication failures.
Ensure identity policies map seamlessly to modern Zero Trust standards, enforcing Contextual Multi-Factor Authentication (MFA), step-up authentication, and adaptive risk engine rules without compromising user friction.
Respond promptly to production issues by serving on an on-call rotation for the 24-hour support of the team's systems as well as providing escalation support as needed to the other team members.