[Hiring] Staff Cloud Identity Platform Engineer @General Motors

Role Description

As a Staff Cloud Identity Platform Engineer, you will design, automate, operate, and continuously improve secure, reliable, and scalable identity services for a global enterprise. You will support Microsoft Entra ID, Microsoft Entra External ID, and foundational Azure infrastructure across workforce, application, partner, and external-user experiences.

This role applies Site Reliability Engineering principles to cloud identity, including:

• Service-level objectives
• Observability
• Automation
• Error-budget management
• Incident response
• Resilience engineering
• Capacity planning
• Reduction of operational toil

You will help establish identity platforms that are secure by design, measurable, recoverable, and dependable at enterprise scale.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related field, or equivalent experience.
• Five or more years of experience in identity and access management, cloud engineering, cybersecurity, infrastructure, software engineering, SRE, or a related technical discipline.
• Hands-on experience with Microsoft Entra ID, including authentication, federation, single sign-on, multifactor authentication, Conditional Access, role-based access control, privileged access, or identity lifecycle concepts.
• Experience with Microsoft Entra External ID or a comparable customer, partner, or external-user identity platform.
• Working knowledge of Azure infrastructure fundamentals, including subscriptions, networking, Key Vault, monitoring, logging, resiliency, and governance.
• Experience translating security, reliability, and application requirements into identity architecture, configurations, integrations, or engineering solutions.
• Experience supporting production services, including monitoring, alerting, troubleshooting, incident response, change management, root-cause analysis, and service reliability practices.
• Understanding of SRE concepts such as SLIs, SLOs, error budgets, incident management, post-incident reviews, automation, toil reduction, and continuous improvement.
• Strong understanding of identity security principles, least privilege, separation of duties, zero-trust concepts, and secure integration patterns.
• Experience with scripting, automation, APIs, infrastructure as code, or policy as code.
• Ability to assess operational risk, prioritize reliability improvements, and make sound technical decisions during incidents.
• Ability to communicate effectively with technical and non-technical stakeholders.

Requirements

• Secondary experience with AWS and/or Google Cloud Platform identity, security, infrastructure, or platform services.
• Ability to apply comparable identity, security, reliability, and operational concepts across Azure, AWS, and Google Cloud Platform environments.
• Experience with AWS IAM, AWS Organizations, AWS KMS, Amazon Cognito, Google Cloud IAM, Google Cloud Identity, Google Cloud KMS, or comparable services.
• Experience defining service health metrics, SLOs, error budgets, operational readiness criteria, or reliability scorecards.
• Experience with identity governance, entitlement management, privileged identity management, access reviews, and joiner-mover-leaver processes.
• Experience with application modernization, API security, directory synchronization, Microsoft Graph, or identity automation.
• Experience with customer identity and access management, including registration, progressive profiling, consent, account recovery, and federation.
• Experience with DevOps, continuous integration and delivery, automated testing, infrastructure as code, policy as code, progressive delivery, or automated rollback.
• Familiarity with platform observability, security analytics, logging, synthetic monitoring, identity-related threat detection, and service dependency mapping.
• Experience with resiliency testing, disaster recovery, capacity planning, performance engineering, or recovery-time and recovery-point objectives.
• Microsoft certifications such as Identity and Access Administrator Associate, Azure Administrator Associate, Cybersecurity Architect Expert, or comparable credentials.
• Experience designing or operating identity platforms for large, complex, or highly regulated enterprises.
• Demonstrated initiative, problem-solving, accountability, integrity, sound judgment, and commitment to continuous improvement.
• Ability to collaborate effectively across engineering, cybersecurity, infrastructure, application, and business teams.

Benefits

• GM offers a variety of health and wellbeing benefit programs.
• Benefit options include medical, dental, vision, Health Savings Account, Flexible Spending Accounts, retirement savings plan, sickness and accident benefits, life insurance, paid vacation & holidays, tuition assistance programs, employee assistance program, GM vehicle discounts and more.