Software Engineer – Access Management Automation

About the role

eBay is seeking a Software Engineer to join the Access Management team within the Global Customer Experience organization. You will design, build, and maintain automation services and micro‑services that replace manual access‑management tasks, ensuring secure, compliant, and scalable access solutions.

Key responsibilities

• Design, develop, and maintain automation services, internal web applications, and micro‑services using Java, Node.js, and JavaScript.
• Build RESTful APIs and event‑driven services that integrate enterprise platforms (NICE, eWFM, Siebel, Genesys) with the Secure Access platform.
• Implement rule‑based access logic (RBAC, dormancy rules, role ownership) and explore AI‑assisted decisioning for anomaly detection.
• Automate recurring processes such as audits, recertifications, SOX reconciliations, and evidence generation.
• Create lightweight internal UIs with React to support access reviews and AI‑driven insights.
• Collaborate with platform, InfoSec, compliance, and data teams to translate policy requirements into code and automated controls.

Required profile

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or equivalent experience.
• 5‑7 years of experience as a Software Engineer, Automation Engineer, or IAM‑focused Systems Engineer.
• Strong hands‑on experience with Java, JavaScript/Node.js, React (or similar), and RESTful API design.
• Solid understanding of IAM concepts, RBAC, and Joiner/Mover/Leaver lifecycle.
• Ability to work across engineering, compliance, and business teams and translate requirements into working code.

Required skills

• Java (services, APIs, batch jobs)
• JavaScript / Node.js (automation services, workflow orchestration)
• React or similar frontend framework
• RESTful API design and integration
• HTML, CSS3
• RDBMS and NoSQL data stores
• IAM, RBAC, JML lifecycle concepts
• AI/ML techniques for anomaly detection and pattern recognition
• TypeScript, Express.js (preferred)
• OAuth, SAML, JWT, SOAP, GraphQL (preferred)
• CI/CD pipelines, logging, monitoring