Staff Cybersecurity Software Engineer - Authorization Services

Join General Motors to build and run production-critical authorization services and raise the bar for secure access control engineering.

Responsibilities

• Lead design and implementation of authorization frameworks aligned with industry standards, then extend them as requirements evolve
• Architect and build access control systems using permissions, roles, and attributes to control who can perform specific actions
• Define and implement policy-driven and distributed authorization solutions
• Drive security and authorization reviews across services and ensure remediation of identified issues
• Design, develop, test, and maintain cloud-native microservices and APIs, including technical direction for how services are built, deployed, and operated on public cloud platforms
• Write clean, testable, and secure code in one or more of: Go, Java, Python, JavaScript
• Author technical guidance, reusable patterns, and guardrails, then roll them out across product environments
• Define and implement observability for services, including metrics, logs, traces, dashboards, and alerts
• Design data models and manage data storage using relational and graph databases
• Support critical production systems and participate in an on-call rotation

Requirements

• 8+ years of hands-on application development experience, including authentication, authorization, or access control
• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or a related field, or equivalent expertise
• Deep expertise building and maintaining role-based and attribute-based access control systems for complex use cases
• Strong programming skills in one or more: Go, Springboot, Python, JavaScript
• Experience with infrastructure as code and deployment automation such as Helm, GitOps, Argo CD, or comparable tools
• Experience applying AI-assisted software engineering across design, implementation, testing, debugging, documentation, and continuous improvement
• Advanced problem-solving focused on security, reliability, scalability, and maintainability
• Clear written and verbal communication, including the ability to lead design discussions
• Experience with modern cloud and container technologies such as Azure, Docker, Kubernetes (K8s), plus infrastructure automation and comparable DevOps practices
• Experience building secure applications with identity, authentication, authorization, role-based access, secrets, and secure service-to-service communication
• Experience with Azure services including managed databases, object storage, Key Vault, Redis, managed identity, or equivalent services
• Experience with automated testing, CI/CD pipelines, GitHub Actions or comparable technologies, source control, and production release practices
• Experience with observability: structured logging, metrics, tracing, health checks, alerting, and operational dashboards

Technologies

• Go, Java, Python, JavaScript
• Springboot
• Helm
• GitOps, Argo CD
• Azure
• Docker
• Kubernetes (K8s)
• Azure Key Vault
• Redis
• managed identity
• GitHub Actions
• metrics, logs, traces, structured logging
• relational databases, graph databases
• cloud-native microservices, APIs
• OAuth, OIDC
• SpiceDB, Zanzibar
• IAM
• public cloud platforms

Preferred Qualifications (Competitive Advantage)

• Deep expertise in distributed application development, authorization frameworks, and policy engines
• Expertise modeling complex permissions and relationships in graph or relationship-focused data stores
• Demonstrated expertise building highly available and scalable custom security frameworks and tooling
• Hands-on experience with IAM, OAuth, OIDC, SpiceDB, Zanzibar

Compensation

• Salary range: $160,200 - $246,300 (yearly)
• Bonus Potential: incentive pay program with payouts based on company performance, job level, and individual performance

Location and Remote/On-site Expectations

• Location: Warren, MI (remote)
• Remote role, with in-person expectation if the selected candidate lives within a specific mile radius of a GM hub: report three times a week (or other frequency set by the manager)

Relocation

• Relocation benefits available for candidates who qualify under company policy

Immigration Sponsorship

• General Motors does not provide immigration-related sponsorship for this role
• Do not apply if you will need GM immigration sponsorship now or in the future

Benefits

• Health and wellbeing benefit programs: medical, dental, vision, Health Savings Account, Flexible Spending Accounts
• retirement savings plan
• sickness and accident benefits
• life insurance
• paid vacation & holidays
• tuition assistance programs
• employee assistance program
• GM vehicle discounts

Accommodations

• General Motors offers opportunities to all job seekers, including individuals with disabilities
• For reasonable accommodation needs during the job search or application process: email or call 1-800-865-7580