MTS1 - Platform Security

Start free →

Or apply yourself on the official page →

About the role

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all. Sr. Software Engineer [MTS1] – Platform Security Location: Bengaluru Team: Cloud Platform Security About the Team eBay’s Cloud Security Engineering team builds foundational security services that protect our global marketplace. The team designs and operates secure, scalable cryptographic platforms that enable trusted transactions, secure communications, and strong identity guarantees across millions of users and services. Role Summary We are seeking a Senior Software Engineer to join our Bengaluru team with strong expertise in cryptography, encryption, and public key infrastructure. In this role, you will design and implement high-assurance cryptographic services that support authentication, digital signatures, key management, and secure data protection across eBay’s distributed systems. You will combine strong technical depth with sound engineering judgment to deliver secure, scalable, and production-ready platform capabilities. What You’ll Do • Design, build, and maintain cryptographic services and libraries that support encryption, digital signatures, and secure key management. • Build and maintain systems leveraging public key cryptography, including RSA, ECC, and DSA. • Develop and enhance PKI infrastructure, certificate lifecycle management, and trust frameworks. • Implement secure integrations using Java Cryptography Architecture (JCA) and Java Cryptography Extension (JCE). • Integrate with hardware-backed security systems and standards such as PKCS#11, KMIP, and TPM 2.0. • Collaborate with platform and infrastructure teams to embed cryptographic protections into distributed services. • Conduct threat modeling, security reviews, and cryptographic design validation. • Improve the performance, scalability, and resilience of cryptographic operations in high-throughput systems. • Stay current with modern cryptographic standards, vulnerabilities, and industry best practices.   Must-Have Qualifications • Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience. • 7+ years of software engineering experience, with a strong focus on security, cryptography, or secure platform development. • Strong hands-on experience with cryptography and encryption, including AES, RSA, ECC, DSA, and digital signature algorithms. • Strong understanding of public key infrastructure, certificate management, and trust models. • Proficiency in Java and secure application development using JCA, JCE, or J2EE-based secure applications. • Experience implementing or integrating with PKCS#11, KMIP, or similar key management protocols. • Strong software engineering skills in Go, Java, or C++, with the ability to build and operate production-quality backend systems. • Strong knowledge of distributed systems, secure service design, secure coding practices, and common cryptographic pitfalls. • Ability to work effectively across teams, balancing security, scalability, and operational reliability in production environments.   Nice-to-Have Qualifications • Familiarity with AI-assisted engineer

View the official posting →