Staff Cloud Identity Platform Engineer

General Motors

. Design, configure, implement, and operate Microsoft Entra ID capabilities for workforce and application identity .

Posted 10/8/2026full-timeRemote • Michigan • United StatesLead💰 $160,200 - $246,300 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Microsoft Entra ID and External ID capabilities, with a strong focus on identity and access management, cloud engineering, and cybersecurity. Proficient in implementing secure identity standards and automating identity platform activities using various tools and technologies.

Highest-signal resume keywords

Microsoft Entra IDIdentity And Access ManagementAzure Infrastructure FundamentalsScripting And AutomationIncident Response

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

OAuth 2.0OpenID ConnectSAMLIdentity GovernanceRole-Based Access ControlMultifactor AuthenticationInfrastructure As CodeContinuous Integration And DeliveryService-Level IndicatorsIdentity Security Principles

Soft Skills

Effective CommunicationProblem SolvingCollaboration

Tools & Technologies

PowerShellAzure CLIMicrosoft GraphBicepTerraformMonitoring ToolsLogging ToolsSynthetic Monitoring

Certifications & Qualifications

Identity And Access Administrator AssociateAzure Administrator AssociateCybersecurity Architect Expert

Industry Keywords

Cloud EngineeringCybersecurityService ReliabilityZero-Trust ConceptsOperational Readiness

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformTerraformVault

About the role

Key responsibilities & impact

Design, configure, implement, and operate Microsoft Entra ID capabilities for workforce and application identity
Implement Microsoft Entra External ID capabilities for external users, partners, and application experiences
Integrate applications and services using OAuth 2.0, OpenID Connect, SAML, and other secure identity standards
Configure and support single sign-on, multifactor authentication, Conditional Access, role-based access control, privileged access, identity governance, and access reviews
Develop secure patterns for application onboarding, directory synchronization, service principals, managed identities, workload access, and identity lifecycle processes
Define and manage service-level indicators and objectives for identity platforms
Establish reliability practices including error budgets, availability targets, dependency mapping, capacity planning, resiliency testing, and operational health reviews
Apply Azure infrastructure fundamentals to identity platform engineering
Build observability using metrics, logs, traces, synthetic transactions, dashboards, alerting, and identity-specific security and reliability signals
Monitor platform health, investigate alerts, troubleshoot authentication and authorization issues, and participate in incident response and on-call activities
Lead or contribute to incident triage, service restoration, stakeholder communications, root-cause analysis, and blameless post-incident reviews
Identify recurring incidents, manual processes, and operational toil; automate or redesign them
Automate identity and cloud platform activities using PowerShell, Azure CLI, Microsoft Graph, Bicep, Terraform, or comparable technologies
Contribute to infrastructure-as-code, continuous integration and delivery, automated testing, policy-as-code, progressive delivery, change validation, and safe rollback practices
Design and validate high-availability, failover, recovery, and business-continuity patterns
Maintain runbooks, playbooks, service documentation, troubleshooting guides, architecture records, and operational readiness checklists
Partner with cybersecurity, infrastructure, application, architecture, privacy, compliance, and product teams
Evaluate Microsoft capabilities, third-party solutions, and emerging identity patterns
Contribute to design reviews, reliability reviews, technical planning, and engineering knowledge-sharing activities

Requirements

What you’ll need

Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related field, or equivalent experience
Five or more years of experience in identity and access management, cloud engineering, cybersecurity, infrastructure, software engineering, SRE, or a related technical discipline
Hands-on experience with Microsoft Entra ID
Experience with Microsoft Entra External ID or a comparable customer, partner, or external-user identity platform
Working knowledge of Azure infrastructure fundamentals, including subscriptions, networking, Key Vault, monitoring, logging, resiliency, and governance
Experience translating security, reliability, and application requirements into identity architecture, configurations, integrations, or engineering solutions
Experience supporting production services, including monitoring, alerting, troubleshooting, incident response, change management, root-cause analysis, and service reliability practices
Understanding of SRE concepts such as SLIs, SLOs, error budgets, incident management, post-incident reviews, automation, toil reduction, and continuous improvement
Strong understanding of identity security principles, least privilege, separation of duties, zero-trust concepts, and secure integration patterns
Experience with scripting, automation, APIs, infrastructure as code, or policy as code
Ability to assess operational risk, prioritize reliability improvements, and make sound technical decisions during incidents
Ability to communicate effectively with technical and non-technical stakeholders
Preferred: experience with AWS and/or Google Cloud Platform identity, security, infrastructure, or platform services
Preferred: experience with AWS IAM, AWS Organizations, AWS KMS, Amazon Cognito, Google Cloud IAM, Google Cloud Identity, Google Cloud KMS, or comparable services
Preferred: experience defining service health metrics, SLOs, error budgets, operational readiness criteria, or reliability scorecards
Preferred: experience with identity governance, entitlement management, privileged identity management, access reviews, and joiner-mover-leaver processes
Preferred: experience with application modernization, API security, directory synchronization, Microsoft Graph, or identity automation
Preferred: experience with customer identity and access management
Preferred: experience with DevOps, continuous integration and delivery, automated testing, infrastructure as code, policy as code, progressive delivery, or automated rollback
Preferred: familiarity with platform observability, security analytics, logging, synthetic monitoring, identity-related threat detection, and service dependency mapping
Preferred: experience with resiliency testing, disaster recovery, capacity planning, performance engineering, or recovery-time and recovery-point objectives
Preferred: Microsoft certifications such as Identity and Access Administrator Associate, Azure Administrator Associate, Cybersecurity Architect Expert, or comparable credentials
Preferred: experience designing or operating identity platforms for large, complex, or highly regulated enterprises

Benefits

Comp & perks

Bonus potential based on company, job level, and individual performance
Medical insurance
Dental insurance
Vision insurance
Health Savings Account
Flexible Spending Accounts
Retirement savings plan
Sickness and accident benefits
Life insurance
Paid vacation and holidays
Tuition assistance programs
Employee assistance program
GM vehicle discounts
Relocation benefits for qualifying candidates