Jobs / General Motors (GM)
Staff Cloud Identity Platform Engineer
General Motors (GM) · Warren, MI, United States
Warren, MI, United StatesExp: 5+ yrs160,200-246,300 USD/yearlyRemote
Remuneration
$160,200–$246,300 plus incentive pay and benefits
Location
Warren, MI, United States
Visa sponsorship
No visa sponsorship
GM does not provide immigration-related sponsorship for this role.
Job summary
Designs, automates, operates, and improves secure, reliable, scalable cloud identity services, supporting Microsoft Entra ID, Microsoft Entra External ID, and Azure infrastructure for workforce, application, partner, and external-user access. Applies Site Reliability Engineering practices such as service-level objectives, observability, incident response, resilience, and toil reduction, while building integrations using OAuth 2.0, OpenID Connect, and SAML.
Benefits
Medical, dental, and vision insuranceHealth Savings AccountFlexible Spending AccountsRetirement savings planSickness and accident benefitsLife insurancePaid vacation and holidaysTuition assistanceEmployee assistance programVehicle discountsRelocation benefits for eligible candidates
Qualifications
- At least five years of experience in identity and access management, cloud engineering, cybersecurity, infrastructure, software engineering, SRE, or a related technical discipline.
- Hands-on experience with Microsoft Entra ID and identity capabilities such as authentication, federation, single sign-on, multifactor authentication, Conditional Access, and role-based access control.
- Experience with Microsoft Entra External ID or a comparable external-user identity platform.
- Working knowledge of Azure infrastructure, including subscriptions, networking, Key Vault, monitoring, logging, resiliency, and governance.
- Experience supporting production services, including monitoring, troubleshooting, incident response, change management, and root-cause analysis.
- Understanding of SRE concepts, including service-level indicators and objectives, error budgets, incident management, post-incident reviews, and toil reduction.
- Knowledge of least privilege, separation of duties, zero-trust concepts, and secure identity integration patterns.
- Experience with scripting, automation, APIs, infrastructure as code, or policy as code.
- Ability to assess operational risks, prioritize reliability improvements, and communicate effectively with technical and non-technical stakeholders.
- Bachelor’s degree in a related field or equivalent experience.
Responsibilities
- Design, configure, implement, and operate Microsoft Entra ID for workforce and application identity.
- Implement external-user identity experiences, including registration, authentication, federation, user journeys, and authorization.
- Integrate applications using OAuth 2.0, OpenID Connect, SAML, and other secure identity standards.
- Define and manage identity platform service-level indicators, objectives, and reliability practices.
- Build observability with metrics, logs, traces, synthetic transactions, dashboards, and alerts.
- Monitor platform health, troubleshoot authentication and authorization issues, and participate in incident response and on-call activities.
- Automate identity and cloud platform tasks using scripting, APIs, and infrastructure-as-code tools.
- Design and validate high-availability, failover, recovery, and business-continuity patterns.
- Maintain operational documentation, runbooks, troubleshooting guides, and readiness checklists.
- Reduce operational toil and improve reliability through automation and process redesign.
Skills
AWSAWS KMSAzureAzure Key VaultBicepGCPIAMPowerShellTerraformVaultAzure DevOpsGitHub Actions
Certifications
Microsoft Identity and Access Administrator AssociateMicrosoft Azure Administrator AssociateMicrosoft Cybersecurity Architect Expert
Degrees
Bachelor’s degree in computer science, information technology, cybersecurity, en
Work schedule
On-call activities as applicable
Company size
Global enterprise
Relocation
Yes