> Markdown version of [/jobs/ext/2248985-sr-mts-software-engineer-identity](https://www.wearedevelopers.com/jobs/ext/2248985-sr-mts-software-engineer-identity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. MTS Software Engineer - Identity - **Company:** eBay - **Location:** San Jose, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $217,600.0 - $290,500.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, User Authentication, Software as a Service, Distributed Systems, Federated Identity Management, Identity and Access Management, OAuth, OpenID, Role-Based Access Control, Openid Connect, Phishing, Zero Trust Network Access, Security Assertion Markup Language (SAML), Multi-Cloud, Information Technology - **Published:** August 26, 2026 - **Apply:** https://jobs.ebayinc.com/us/en/job/R0075377/Sr-MTS-Software-Engineer-Identity ## About the Role * Extensive experience designing and building identity and access management systems * Strong knowledge of identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM) * Experience with federated and unified identity architectures in distributed environments * Proven ability to influence technical direction across multiple teams and platforms, * Experience with identity verification, risk-based authentication, or trust signals * Familiarity with Zero Trust architectures and adaptive access control models * Experience operating identity platforms at scale in regulated or security-sensitive environments Impact & Scope * Technical decisions have broad impact across the Identity Domain and adjacent platforms * Establishes standards and patterns adopted by multiple teams, * Bachelor's degree in Computer Science, Engineering, or related field * 12+ years of experience building large-scale distributed systems * 5+ years as a technical lead or architect in identity management domain owning end-to-end system design ## Description At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. At eBay, we're more than a global ecommerce leader - we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work - every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers - and help us connect people and build communities to create economic opportunity for all. Role Summary The Senior Engineer in the Identity Domain provides senior technical leadership for identity services across the platform. This role defines and evolves enterprise-wide identity and access management (IAM) capabilities, influencing architecture, engineering standards, and execution across multiple teams. The Senior Engineer sets technical direction for authentication, authorization, and identity federation, drives adoption of modern identity standards, and ensures identity is implemented as a consistent, secure platform capability. Key Responsibilities Technical Leadership * Act as the senior technical authority for identity services across platforms and teams * Define and evolve enterprise-wide IAM architecture and engineering standards * Design and maintain reference implementations for core identity capabilities * Review and influence system designs and code to ensure security, scalability, and correctness Authentication, Authorization & Access Management * Architect and implement OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0 for SSO and federation across hybrid, multi-cloud, and SaaS environments * Drive adoption of phishing-resistant, passwordless authentication, including FIDO2, WebAuthn, and Passkeys * Define API authorization patterns using JWT and mTLS for service-to-service communication * Lead the transition to adaptive, context-aware authorization models (RBAC/ABAC) aligned with Zero Trust principles Identity Lifecycle & Federation * Define and implement automated identity lifecycle management using SCIM * Guide teams on unified and federated identity constructs and cross-domain trust models * Incorporate global trends in identity and identity verification into platform design and standards Influence & Mentorship * Mentor engineers across teams, raising the bar for identity and security engineering * Provide technical guidance to product and platform partners on identity-related decisions * Influence roadmaps and priorities through technical leadership and domain expertise Required Qualifications * Extensive experience designing and building identity and access management systems * Strong knowledge of identity protocols and standards (OAuth 2.0, OIDC, SAML, SCIM) * Experience with federated and unified identity architectures in distributed environments * Proven ability to influence technical direction across multiple teams and platforms Preferred Qualifications * Experience with identity verification, risk-based authentication, or trust signals * Familiarity with Zero Trust architectures and adaptive access control models * Experience operating identity platforms at scale in regulated or security-sensitive environments Impact & Scope * Technical decisions have broad impact across the Identity Domain and adjacent platforms * Establishes standards and patterns adopted by multiple teams Qualification * Bachelor's degree in Computer Science, Engineering, or related field * 12+ years of experience building large-scale distributed systems * 5+ years as a technical lead or architect in identity management domain owning end-to-end system design Additional Details The base pay range for this position is expected in the range below: $217,600 - $290,500 Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Remote roles are not eligible for U.S. visa sponsorship. eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at talent@ebay.com. We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice, Privacy Center and AI Hiring Guideline. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Migrating half a million users to a new payment service provider](https://www.wearedevelopers.com/videos/730-migrating-half-a-million-users-to-a-new-payment-service-provider) ## Related Articles - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)