Staff Authentication & Authorization Security Engineer

General Motors; Sunnyvale (CA); Remote; USD 160,000 - 246,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) with company match

Paid time off

Job summary

General Motors seeks a Staff Software Engineer to lead design, build, and operation of authorization security services. You will own core authentication and authorization capabilities, set engineering standards for sign-in and permissions, and mentor engineers to keep production systems secure and reliable.

You will design and implement policy-driven, distributed authorization solutions, review security across services, and drive secure coding practices in Go, Java, Python, JavaScript, or SQL.

Qualifications

• Proven experience designing authentication/authorization flows in production.
• Experience with RBAC/ABAC models for complex use cases.
• Strong cryptography and security design instincts.

Responsibilities

• Lead design and implementation of authentication frameworks and authorization controls.
• Architect access control systems using roles, permissions, and attributes.
• Develop cloud-native microservices and APIs in modern languages.
• Drive CI/CD pipelines and IaC for cloud deployments.
• Mentor engineers and contribute to security standards.

Skills

Authentication

Authorization

RBAC/ABAC

Go/Java/Python/JS/SQL

Security Engineering

Mentoring/Leadership

Education

Bachelor’s degree in CS/Software Eng or related field

Tools

Kubernetes

Docker

Terraform

CI/CD tooling

Job description

General Motors seeks a Staff Software Engineer to lead design, build, and operation of authorization security services. You will own core authentication and authorization capabilities, set engineering standards for sign-in and permissions, and mentor engineers to keep production systems secure and reliable.

You will design and implement policy-driven, distributed authorization solutions, review security across services, and drive secure coding practices in Go, Java, Python, JavaScript, or SQL.