Senior Cloud Identity Platform Engineer — Remote

Artha; Northern (KY); Hybrid; USD 160,000 - 246,000; Full time

Benefits offered by this job

Health and wellbeing benefits

Relocation benefits available

Job summary

General Motors is seeking a Staff Cloud Identity Platform Engineer to design, automate, operate, and improve secure identity services at enterprise scale. You will support Entra ID capabilities for workforce and external users, applying SRE principles to reliability, observability, incident response, and recovery.

The role emphasizes Azure infrastructure, IaC, and secure patterns for onboarding, federation, and access control, with on-call participation and cross-functional collaboration across

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related field, or equivalent experience.
• Five or more years of experience in identity and access management, cloud engineering, cybersecurity, infrastructure, software engineering, SRE, or related discipline.
• Hands‑on experience with Microsoft Entra ID, including authentication, federation, single sign-on, MFA, CA, RBAC, privileged access, or lifecycle concepts.
• Experience with Microsoft Entra External ID or comparable platforms.
• Knowledge of Azure infrastructure fundamentals: subscriptions, networking, Key Vault, monitoring, logging, governance.
• Experience translating security, reliability, and application requirements into identity architecture and configs.
• Experience supporting production services: monitoring, alerting, incident response, RC analysis, and reliability practices.
• Understanding of SRE concepts: SLIs, SLOs, error budgets, incident management, post-incident reviews.
• Strong understanding of identity security principles, least privilege, zero-trust, secure integration patterns.
• Experience with scripting, automation, APIs, IaC, policy as code.

Responsibilities

• - Design, configure, implement, and operate Microsoft Entra ID capabilities for workforce and application identity.
• - Implement Entra External ID capabilities for external users, partners, and app experiences.
• - Integrate apps and services using OAuth 2.0, OpenID Connect, SAML, and other standards.
• - Configure and support SSO, MFA, Conditional Access, RBAC, privileged access, and identity governance.
• - Automate identity and cloud platform activities using PowerShell, Azure CLI, Graph, Bicep, Terraform.
• - Define service-level indicators and objectives for identity platforms.
• - Establish reliability practices, capacity planning, and runbooks for identity services.
• - Build observability with metrics, logs, traces, dashboards, and alerts.
• - Monitor health, investigate alerts, troubleshoot auth issues, and participate in incident response.
• - Lead or contribute to incident triage, post-incident reviews, and root-cause analysis.
• - Collaborate with cybersecurity, infrastructure, architecture, privacy, compliance, and product teams.
• - Communicate technical concepts clearly in design and reliability reviews.

Skills

Identity security

SRE

Azure fundamentals

OAuth 2.0/OpenID

Federation

Conditional Access

PowerShell

Azure CLI

Microsoft Graph

Terraform

Incident response

Education

Bachelor's degree in CS/IT/Engineering or equivalent

Tools

Bicep

Terraform

Job description

General Motors is seeking a Staff Cloud Identity Platform Engineer to design, automate, operate, and improve secure identity services at enterprise scale. You will support Entra ID capabilities for workforce and external users, applying SRE principles to reliability, observability, incident response, and recovery.

The role emphasizes Azure infrastructure, IaC, and secure patterns for onboarding, federation, and access control, with on-call participation and cross-functional collaboration across