Software Architect - Cloud Security

eBay•Austin, TX

1d•Remote

About The Position

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all. This role cannot offer any sort of visa sponsorship. About the team and the role: The Identity team is responsible for building and evolving the foundational services that secure how people, applications, and platforms access eBay systems and experiences. This team partners broadly across engineering, security, and product organizations to deliver scalable, resilient, and modern identity capabilities that support a hybrid, multi-cloud, and SaaS ecosystem. As a senior technical leader in the Identity domain, this role will shape the future of authentication, authorization, federation, and identity lifecycle management across eBay. You will serve as a trusted authority on enterprise IAM architecture, define engineering standards embraced across teams, and guide the invent of secure, scalable, and reliable identity solutions. This role offers broad influence across platforms and roadmaps, with the opportunity to mentor engineers, elevate technical quality, and help drive secure innovation in an AI-first environment.

Requirements

12+ years of experience building large-scale distributed systems, including 5+ years as a technical lead or architect owning end-to-end identity or access management designs.
Deep expertise in IAM technologies and standards, including OAuth 2.0, OpenID Connect, SAML, and SCIM, with experience designing federated or unified identity architectures.
Strong experience building secure authentication, authorization, and federation solutions across distributed, hybrid cloud, multi-cloud, or SaaS environments.
Proven ability to influence technical strategy, establish engineering standards, and lead through collaboration across multiple teams and platforms.
Familiarity with Zero Trust architectures, adaptive access models such as RBAC and ABAC, and areas such as identity verification, risk-based authentication, or trust signals.
Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience; experience operating in security-sensitive or regulated environments is a plus.

Responsibilities

Define and evolve enterprise-wide identity and access management architecture, standards, and reference implementations that improve consistency, scalability, and security across platforms.
Own the design and adoption of modern authentication and federation solutions, including OAuth 2.0, OpenID Connect, SAML 2.0, FIDO2, WebAuthn, and Passkeys, to strengthen user and system trust.
Establish secure authorization patterns for both user and service-to-service access, including JWT, mTLS, and adaptive access models aligned with Zero Trust principles.
Drive automation of identity lifecycle management through SCIM and federated identity models, helping teams simplify provisioning, strengthen governance, and improve cross-domain interoperability.
Influence technical direction across multiple teams by reviewing designs and code, guiding platform decisions, and ensuring identity services meet high standards for security, correctness, and reliability.
Mentor engineers and partner with security, product, and platform leaders to set the standard on identity engineering, develop roadmaps, and embed guardrails and security checkpoints throughout the software development lifecycle.