Software Architect, Cloud Security

eBay

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Austin, TX
Salary
$156,800–$255,300 / yr
Posted
2 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $185k
This role $206k
$121k $270k
below market most similar roles pay here above market

This role pays more than 65% of similar roles. Most pay $151,395–$218,000 — the blue band above. At the midpoint, this role pays about $206k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About eBay

eBay is a global e-commerce company that operates an online marketplace connecting buyers and sellers for a wide range of new and used goods.

eBay currently has 50 open roles on FindRole.

Listed pay typically runs $147,095–$228,050 across 50 roles with salary data.

Most-posted roles

View all roles at eBay

At a glance

TL;DR · Software Architect, Cloud Security

JOB TITLE: Software Architect - Cloud Security The Identity team requires a senior technical leader to shape the future of authentication, authorization, federation, and identity lifecycle management across a hybrid, multi-cloud, and SaaS ecosystem. You will define enterprise-wide identity and access management architecture, establishing engineering standards and reference implementations to improve consistency and security. Daily responsibilities include designing modern solutions using OAuth 2.0, OpenID Connect, SAML 2.0, FIDO2, WebAuthn, and Passkeys. You will also establish secure authorization patterns involving JWT, mTLS, and adaptive access models aligned with Zero Trust principles. Key tasks include driving automation via SCIM and mentoring engineers on identity engineering. This role solves complex problems regarding scalable, reliable identity services and secure service-to-service access within a security-sensitive, distributed environment.

What you'll do

  • Define enterprise-wide identity and access management architecture, standards, and reference implementations.
  • Design and adopt modern authentication and federation solutions like OAuth 2.0, OpenID Connect, and FIDO2.
  • Establish secure authorization patterns for user and service-to-service access using JWT, mTLS, and Zero Trust principles.
  • Drive automation of identity lifecycle management through SCIM and federated identity models.
  • Review designs and code to influence technical direction and ensure high standards for security and reliability.
  • Mentor engineers and partner with security and product leaders to develop identity engineering roadmaps.
  • Embed security checkpoints and guardrails throughout the software development lifecycle.

What we're looking for

  • 12+ years of experience building large-scale distributed systems.
  • 5+ years of experience as a technical lead or architect owning end-to-end identity or access management designs.
  • Deep expertise in IAM technologies and standards including OAuth 2.0, OpenID Connect, SAML, and SCIM.
  • Experience building secure authentication, authorization, and federation solutions across distributed, hybrid cloud, multi-cloud, or SaaS environments.
  • Proven ability to influence technical strategy and establish engineering standards across multiple teams and platforms.
  • Familiarity with Zero Trust architectures, adaptive access models like RBAC and ABAC, and risk-based authentication.
  • Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent experience.
  • Experience operating in security-sensitive or regulated environments (preferred).

More like this

Similar roles

Senior MTS Software Engineer, Identity

eBay

San Jose, CA 22 days ago $217,600–$290,500
IAM OAuth 2.0 OpenID Connect SAML 2.0 SCIM FIDO2 WebAuthn JWT mTLS RBAC ABAC Zero Trust Identity Federation Distributed Systems SSO
10+ yrs exp

Principal Security Engineer, Identity and Access Management

Nordstrom

Seattle, WA 41 days ago
Identity & Access Management (IAM) OAuth 2.0 OpenID Connect SAML SCIM SPIFFE/SPIRE FIDO2 WebAuthn NIST 800-63 AWS IAM Azure Entra ID GCP IAM CIAM SSO Identity Orchestration Zero Trust infrastructure-as-code CI/CD Threat Modeling PCI-DSS CCPA SOX
10+ yrs exp Hybrid

Senior Principal Enterprise Identity & Access Management Architect

Cigna

Bloomfield, CT 5 days ago $174,800–$291,300
IAM IGA PAM CIAM Zero Trust CyberArk Okta Ping Identity SailPoint Microsoft Entra ID SAML OAuth 2.0 OpenID Connect SCIM LDAP Kerberos FIDO2 AWS Azure GCP PowerShell Python Infrastructure-as-Code API Security
10+ yrs exp Hybrid

ICAM Architect

Booz Allen Hamilton

McLean, VA 93 days ago $86,800–$198,000
Entra ID Identity and Access Management (IAM) Zero Trust Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Okta SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Saviynt Sailpoint Omada Oracle IAM CI/CD DevOps AWS Cognito Azure AD B2C Keycloak Google Cloud Identity MFA NIST FedRAMP CMMC

ICAM Engineer, Senior

Booz Allen Hamilton

Scott AFB, IL +1 32 days ago $86,800–$198,000
Ping Federate Entra ID Okta ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust AWS Azure Google Cloud Python PowerShell Bash Jira Confluence

ICAM Engineer

Booz Allen Hamilton

Scott AFB, IL +1 32 days ago $61,900–$141,000
Ping Identity Entra ID Okta ADFS SAML 2.0 OAuth 2.0 OpenID Connect RBAC ABAC Active Directory LDAP Zero Trust AWS Azure Google Cloud Python PowerShell Bash MFA SSO