Staff Cloud Identity Platform Engineer - Remote

General Motors Corporation

Warren (MI)

Hybrid

USD 160,000 - 246,000

Full time

2 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Health and wellbeing benefits

Relocation benefits

GM vehicle discounts

Job summary

General Motors Corporation is seeking a Staff Cloud Identity Platform Engineer to design, automate, operate, and improve secure identity services for a global enterprise. You will support Microsoft Entra ID and Entra External ID and Azure infrastructure across workforce, partners, and external users.

Apply SRE principles to availability, observability, incident response, and capacity planning while building scalable, secure identity platforms.

Qualifications

Bachelor’s degree or equivalent experience in a related field.
Five+ years in identity/access management, cloud engineering, or related discipline.
Hands-on experience with Microsoft Entra ID including authentication, federation, and SSO.
Experience with Microsoft Entra External ID or comparable external-user identity platforms.
Knowledge of Azure infrastructure fundamentals: subscriptions, networking, Key Vault, monitoring, governance.
Experience translating security/reliability requirements into identity architecture and configurations.
Experience supporting production services: monitoring, incident response, root-cause analysis, change management.
Understanding of SRE concepts: SLIs/SLOs, error budgets, post-incident reviews.
Strong understanding of identity security principles: least privilege, zero trust.
Experience with scripting, APIs, IaC, or policy as code (PowerShell, Azure CLI, Terraform).

Responsibilities

Design, configure, implement, and operate Microsoft Entra ID capabilities for workforce and application identity.
Implement Entra External ID capabilities for external users, partners, and experiences.
Integrate applications and services using OAuth 2.0, OpenID Connect, SAML and related standards.
Configure SSO, MFA, Conditional Access, RBAC, and identity governance.
Develop patterns for onboarding, directory sync, service principals, and identity lifecycle processes.
Define and manage SLIs/SLOs for identity platforms and reliability metrics.
Participate in incident triage, post-incident reviews, and stakeholder communications.