Cyber Security Engineer - PKI & Secrets Management

Description
The Role:
We're looking for a self-driven Cyber Security Engineer to lead the design, implementation, and operation of our enterprise PKI and secrets management systems. This critical role shapes how trust and secure access are established across our platforms. You should thrive in a fast-paced, agile environment-comfortable wearing many hats, adapting quickly, and embracing new technologies as needed.
What You'll Do: • Architecting and operating scalable, secure PKI and secrets management services. • Leading design decisions that shape internal trust models and access to sensitive data. • Developing and maintaining policies, processes, and controls for key and secrets lifecycle management. • Collaborating across engineering, infrastructure, and leadership teams to deliver robust cryptographic systems. • Mentoring team members and driving technical excellence across the organization. • Advising leadership on long-term security architecture strategies. • Participating in on-call rotations for global, critical services.
What You'll Need: • Bachelor's degree in Computer Science, Mathematics, Physics, or equivalent experience. • Proven experience in enterprise security engineering or Site Reliability Engineering (SRE). • Hands-on experience with secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, BeyondTrust).
• Strong understanding of public-key cryptography, PKI, and cryptographic protocols. • Experience designing and operating production-level PKI systems. • Proficiency with infrastructure-as-code tools (e.g., Terraform). • Familiarity with cloud platforms (AWS, GCP, Azure). • Experience with containerization, orchestration, and CI/CD workflows. • Strong communication skills and ability to present technical concepts to leadership. • Solid threat modeling and security architecture skills.
Preferred Qualifications: • HashiCorp Vault certification or demonstrable expert-level proficiency. • Deep expertise in HashiCorp Vault and Terraform. • Experience scaling backend systems and implementing secure hardware (HSM, TPM, TEE, etc.). • Familiarity with modern authentication protocols (OAuth 2.0, OIDC, WebAuthn/FIDO2, Zero Trust). • Experience with remote attestation and secure enclave technologies. • Proficiency in Go, Rust, Python, or Node.js. • Passion for security, attention to detail, and a drive for correctness.
GM DOES NOT PROVIDE IMMIGRATION-RELATED SPONSORSHIP FOR THIS ROLE. PLEASE DO NOT APPLY FOR THIS ROLE IF YOU WILL NEED GM IMMIGRATION SPONSORSHIP (e.g., H-1B, TN, STEM OPT, etc.) NOW OR IN THE FUTURE.
• This job may be eligible for relocation benefits.
About GM
Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.
Why Join Us
We believe we all must make a choice every day - individually and collectively - to drive meaningful change through our words, our deeds and our culture. Every day, we want every employee to feel they belong to one General Motors team.
Total Rewards | Benefits Overview
From day one, we're looking out for your well-being-at work and at home-so you can focus on realizing your ambitions. Learn how GM supports a rewarding career that rewards you personally by visiting Total Rewards resources.
Non-Discrimination and Equal Employment Opportunities (U.S.)
General Motors is committed to being a workplace that is not only free of unlawful discrimination, but one that genuinely fosters inclusion and belonging. We strongly believe that providing an inclusive workplace creates an environment in which our employees can thrive and develop better products for our customers.
All employment decisions are made on a non-discriminatory basis without regard to sex, race, color, national origin, citizenship status, religion, age, disability, pregnancy or maternity status, sexual orientation, gender identity, status as a veteran or protected veteran, or any other similarly protected status in accordance with federal, state and local laws.
We encourage interested candidates to review the key responsibilities and qualifications for each role and apply for any positions that match their skills and capabilities. Applicants in the recruitment process may be required, where applicable, to successfully complete a role-related assessment(s) and/or a pre-employment screening prior to beginning employment. To learn more, visit How we Hire.
Accommodations
General Motors offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, email us [email protected] or call us at 800-865-7580. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.