At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.
Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.
Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.
eBay is seeking a Senior Single Sign-On (SSO) & Identity and Access Management (IAM) Engineer to join our Identity & Security team. In this role, you will design, secure, and scale the identity fabric that powers eBay's internal workforce & massive partner network.
We are looking for a deeply technical, hands-on expert—high-caliber engineers who possesses a track record of untangling complex federated identity issues, optimizing session management, and driving seamless integrations across diverse enterprise and cloud infrastructures.
Core ResponsibilitiesArchitecture & Federation: Architect, deploy, and support robust enterprise-grade SSO solutions across eBay's corporate and partner-facing applications utilizing SAML 2.0, OAuth 2.0, OIDC, and WS-Federation, SCIM, and LDAP.
Identity Infrastructure Management: Act as the primary subject matter expert for enterprise identity stacks, with a heavy emphasis on the Ping Identity Suite (PingFederate, PingProtect, PingID), or equivalent hybrid platforms (e.g., EntraID).
Advanced Troubleshooting: Diagnose and resolve complex, intermittent infrastructure and network-level authentication challenges (such as TCP resets at authenticator endpoints, certificate mismatches, and session idle timeout expirations).
Application & Platform Integration: Partner with internal software engineering squads to integrate multi-tiered environments securely into the SSO fabric.
Log Analysis & Tuning: Actively monitor and analyze server-level logs, configure trace debugging, and interpret SAML assertions or OAuth tokens to preemptively catch and resolve edge-case authentication failures.
Security & Compliance: Ensure identity policies map seamlessly to modern Zero Trust standards, enforcing Contextual Multi-Factor Authentication (MFA), step-up authentication, and adaptive risk engine rules without compromising user friction.
Respond promptly to production issues by serving on an on-call rotation for the 24-hour support of the team's systems as well as providing escalation support as needed to the other team members.
Domain Expertise: 5–8+ years of dedicated engineering experience within the Identity and Access Management (IAM) space, with a sharp focus on Single Sign-On.
Technical Mastery: Deep hands-on proficiency with PingFederate /EntraID similar products for policy tree configuration, and custom token generation.
Protocol Proficiency: Thorough knowledge of lower-level network routing, load balancing (F5/NGINX), and HTTP/HTTPS protocol mechanics.
Enterprise App Ecosystems: Proven experience connecting SaaS platforms, Developer APIs (eBay Developer Program tools), and traditional on-prem enterprise applications into unified auth pipelines.
Scripting & Automation: Strong capability in scripting (Python, PowerShell, or Bash) to automate configuration deployments, log parsing, and routine health checks.
Education: Bachelor’s degree in Computer Science, Cyber Security, Information Systems, or a related technical field (or equivalent practical experience).
Additional Details
The base pay range for this position is expected in the range below:
C$124,000 - C$165,500Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including RRSP eligibility, various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
This job posting relates to an existing vacancy within eBay.
eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at [email protected]. We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility.
We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice, Privacy Center and AI Hiring Guidelines.
Skills Required
- 5-8+ years of engineering experience in Identity and Access Management (IAM) with focus on Single Sign-On
- Hands-on proficiency with PingFederate, PingProtect, PingID or equivalent (EntraID) for policy configuration and custom token generation
- Practical knowledge of SAML 2.0, OAuth 2.0, OIDC, WS-Federation, SCIM, and LDAP
- Experience integrating SaaS platforms, developer APIs, and on-prem enterprise applications into SSO/IAM pipelines
- Deep understanding of network routing, load balancing (F5/NGINX), and HTTP/HTTPS/TCP mechanics
- Strong scripting and automation skills (Python, PowerShell, or Bash) for deployments and log parsing
- Proven ability to analyze server logs, debug SAML assertions/OAuth tokens, and resolve intermittent authentication failures
- Experience implementing Zero Trust patterns, contextual/adaptive MFA and step-up authentication
- Willingness to serve on a 24-hour on-call rotation and respond to production incidents
- Bachelor's degree in Computer Science, Cyber Security, Information Systems, or equivalent practical experience
eBay Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about eBay and has not been reviewed or approved by eBay.
-
Healthcare Strength — Medical, dental, and vision coverage begin on the date of hire, complemented by mental health resources, an EAP, disability coverage, FSAs, and wellness initiatives.
-
Leave & Time Off Breadth — A robust mix of PTO, paid holidays, flexible work styles, parental leave, and a four‑week paid sabbatical after five years supports work‑life balance.
-
Equity Value & Accessibility — Total compensation commonly includes stock components, with access to an employee stock purchase plan at a discount and stock awards enhancing overall packages.
eBay Insights
What We Do
eBay Inc. is a global commerce leader that connects millions of buyers and sellers around the world. We exist to enable economic opportunity for individuals, entrepreneurs, businesses and organizations of all sizes. Our portfolio of brands includes eBay Marketplace and eBay Classifieds Group, operating in 190 markets around the world. We offer sellers the ability to grow a business with little barrier to entry regardless of size, background or geographic location. We never compete with our sellers. We win when our sellers succeed. Buyers who shop on our Marketplace and Classifieds platforms enjoy a highly personalized experience with an unparalleled selection at great value.
