* This role cannot offer any sort of visa sponsorship *About the team and the role:The Identity Engineering team at eBay is redefining how identity is managed in an AI centric world. We build secure, cloud-native platforms that protect access for people, services, and a growing ecosystem of AI agents, autonomous systems, and intelligent bots.
Our team partners closely with security, infrastructure, and AI platform teams to ensure that identity and access are intelligent, adaptive, and seamless for developers and customers.
What you will accomplish:- Design and deliver AI-powered identity management capabilities that securely manage the full lifecycle of human and non-human identities (services, bots, AI agents), improving reliability and reducing manual effort.
- Build and evolve adaptive access control systems (RBAC, ABAC, PBAC) that use behavioral signals, risk scores, and real-time context to enable safer, more precise authorization decisions.
- Create intelligent identity governance solutions that automate access reviews, surface policy recommendations, and detect anomalies, improving governance coverage and reducing response times.
- Develop scalable, developer-friendly APIs and microservices for authentication, authorization, and identity lifecycle management that enable teams across eBay to integrate secure, AI centric identity into their applications.
- Integrate AI/ML capabilities and AI-powered engineering tools into identity workflows and development processes to enhance code quality, accelerate delivery, and increase system resilience.
- Partner with security, platform, and AI teams to define and continuously refine standards, patterns, and guidelines for AI identity and access governance across eBay's distributed, cloud-native environment.
What you will bring:- Bachelor's degree, Master's degree, or equivalent experience in Computer Science, Engineering, or a related field is required. Candidates should also have 7+ years of software engineering experience passionate about identity, security platforms, or similar areas.
- Deep understanding of identity lifecycle management, authentication and authorization patterns, and access governance, including experience with technologies such as Okta, Azure AD, SailPoint, ForgeRock, or similar platforms.
- Hands-on experience securing non-human identities (for example, service accounts, workloads, bots, or AI agents) and designing systems for distributed, cloud-native environments.
- Strong backend engineering skills in Java or a similar language, including experience building and operating scalable APIs and microservices for identity or security-critical services.
- Proven track record of applying AI/ML concepts and AI-powered development tools to real-world engineering problems (such as anomaly detection, risk-based authentication, or intelligent recommendations).
- Familiarity with modern identity and security practices-such as OAuth2, OIDC, SAML, Zero Trust and adaptive access models, or AI agent frameworks and MCPs-and an eagerness to continuously learn in a rapidly evolving AI and security landscape.
* This role cannot offer any sort of visa sponsorship *#LI-BB1
Additional DetailsThe base pay range for this position is expected in the range below:
$172,000 - $229,600
Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.
Remote roles are not eligible for U.S. visa sponsorship.
