* This role cannot offer any sort of visa sponsorship *About the team and the role:eBay's Cloud Security Engineering team builds the foundational security services that protect our global marketplace. The team develops and operates secure, scalable cryptographic platforms that enable trusted transactions, secure communications, and strong identity guarantees across millions of users and services.
As a Senior Software Engineer - Cryptography & Platform Security, you will build and implement high-assurance cryptographic services that underpin authentication, digital signatures, key management, and secure data protection across eBay's distributed systems.
You will collaborate closely with platform and infrastructure teams to embed robust cryptographic protections into our services and help shape eBay's long-term security posture.
What you will accomplish:- Design and deliver cryptographic services and libraries that enable secure encryption, digital signatures, and key management for high-scale, global platforms.
- Build and evolve systems using public key cryptography (such as RSA, ECC, and DSA) to support secure transactions, identity, and communications across distributed services.
- Develop and improve PKI infrastructure, including certificate lifecycle management and trust frameworks, to strengthen authentication and service-to-service trust.
- Integrate cryptographic capabilities into Java-based services using JCA/JCE and hardware-backed security modules (for example PKCS#11, KMIP, TPM 2.0) to protect sensitive data and keys.
- Lead and participate in threat modeling, security reviews, and cryptographic design validation to proactively identify and mitigate risks.
- Improve the performance, scalability, and resilience of cryptographic operations in high-throughput environments while knowing the latest modern standards, vulnerabilities, and approaches.
What you will bring:- Bachelor's degree, Master's degree, or equivalent experience in Computer Science, Engineering, or a related field is required. Typically, 7+ years of software engineering experience with a focus on security and cryptography is needed.
- Proven hands-on experience with cryptographic algorithms and protocols, including RSA, ECC, DSA, and digital signatures, applied in production systems.
- Strong understanding of public key infrastructure (PKI), certificate management, and trust models in large-scale, distributed environments.
- Proficiency in Java, including experience using JCA/JCE or building secure J2EE-based applications that integrate cryptographic services.
- Experience implementing or integrating with key management standards and interfaces such as PKCS#11, KMIP, or similar protocols, and familiarity with secure coding practices and common cryptographic pitfalls.
- Ability to work from our San Jose office (in a hybrid or onsite model as defined by eBay policy) and to collaborate optimally across security, platform, and infrastructure teams in a fast-paced environment.
* This role cannot offer any sort of visa sponsorship *#LI-BB1
Additional DetailsThe base pay range for this position is expected in the range below:
$172,000 - $229,600
Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.
Remote roles are not eligible for U.S. visa sponsorship.
