Staff Cybersecurity Software Engineer - Authorization Services
Core
Design, build, and operate production-critical authorization services and access control systems for GM's internal platforms.
Role type
Staff individual contributor application-layer security engineer
Builds
Cloud-native microservices, APIs, and distributed authorization frameworks
Domain
Automotive / Cybersecurity / Identity & Access Management
Required skills
Go, Java, Python, JavaScript, Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Infrastructure as Code, Helm, GitOps, Argo CD, Azure, Docker, Kubernetes, CI/CD pipelines, Observability, Relational and Graph Databases
Preferred skills
Distributed application development, Policy engines, IAM, OAuth, OIDC, SpiceDB, Zanzibar, Graph databases for permissions modeling
Technologies
Go, Springboot, Python, JavaScript, Azure, Docker, Kubernetes, Helm, Argo CD, GitHub Actions, Redis, Key Vault
Responsibilities
Architect and build access control systems using permissions, roles, and attributes; Lead security and authorization reviews across services; Design and maintain cloud-native microservices and APIs; Author technical guidance and reusable patterns; Define observability strategies including metrics, logs, and traces; Support critical production systems and on-call rotation
Seniority
Staff, hands-on IC with mentorship and strategic direction
