Staff Security Engineer: Remote IAM & Auth

General Motors Company; Warren (MI); Remote; USD 160,000 - 246,000; Full time

Benefits offered by this job

Health benefits

Relocation assistance

GM vehicle discounts

Job summary

General Motors Corporation in the United States is seeking a staff software engineer focused on application-layer security. You will design, build, and operate production-critical authorization services, leading the delivery of strategic authorization capabilities and shaping how users and systems sign in and what they may do.

You will mentor engineers, set security standards, and partner with teams to deliver secure, reliable services on cloud platforms.

Qualifications

• 8+ years of hands-on application development incl. auth or access control.
• BS in CS/Software Eng or related field, or equivalent expertise.
• Strong skills in Go, Springboot, Python, and JavaScript.
• Experience with cloud, containers, IaC, and CI/CD.
• Experience with security-focused design and distributed systems.

Responsibilities

• Lead the design and implementation of authorization frameworks following industry standards.
• Architect and build access control systems using permissions, roles, attributes.
• Define policy-driven and distributed authorization solutions across services.
• Lead security reviews and remediation across services.
• Design, develop, test, and maintain cloud-native microservices and APIs on public clouds.
• Write secure code in Go, Java, Python, and JavaScript.
• Define observability with metrics, logs, traces, dashboards, and alerts.
• Support critical production systems and be on-call rotation.

Skills

Go

Springboot

Python

JavaScript

Education

Bachelor's degree in Computer Science, Software Engineering, Information Technology, or related field

Tools

Infrastructure as Code

Helm

GitOps

Argo CD

Azure

Docker

Kubernetes

SpiceDB

OAuth

OIDC

Zanzibar

Job description

General Motors Corporation in the United States is seeking a staff software engineer focused on application-layer security. You will design, build, and operate production-critical authorization services, leading the delivery of strategic authorization capabilities and shaping how users and systems sign in and what they may do.

You will mentor engineers, set security standards, and partner with teams to deliver secure, reliable services on cloud platforms.