General Motors

Cybersecurity Engineer - PKI & Secrets Management

General Motors$100K — $130K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's degree in a related field or equivalent experience
  • Hands-on experience with enterprise PKI concepts and technologies
  • Proficient in certificate lifecycle management processes
  • Experience with certificate authorities and HSM-backed key storage
  • Practical knowledge in designing secrets management solutions
  • Understanding of network security and secure communication protocols
  • Proven ability to manage complex security engineering projects independently

Responsibilities

  • Serve as the primary expert for PKI or secrets management platforms
  • Design and maintain certificate lifecycle management solutions
  • Operate PKI components and ensure monitoring and audits
  • Drive standardization and automation of secrets management patterns
  • Document standards and reference architectures for PKI and secrets
  • Provide technical leadership on Cyber Security projects
  • Collaborate with other teams to integrate secure practices
  • Lead root cause analysis for PKI/secrets incidents
  • Develop automation tooling for certificate and secrets operations
  • Participate in threat analysis and risk assessments
  • Mentor and support other engineers on PKI and secrets management
  • Represent the PKI domain in various internal reviews
  • Contribute to security metrics related to PKI
  • Lead Cyber Security projects involving PKI and secrets
  • Exercise independent judgment on cryptographic decisions
  • Break down complex problems and drive collaborative initiatives
  • Champion change management of PKI and secrets processes
  • Mentor junior engineers and model best practices

Benefits

  • Focus on employee well-being at work and home
  • Support for personal ambition and career development
  • Access to Total Rewards resources for further benefits information
Full Job Description
Job Description

The Role
The Cyber Security Engineer - PKI & Secrets Management acts as a senior domain expert for PKI and secrets, providing technical leadership, hands-on engineering, and cross-team guidance for certificate lifecycle management, key management, hardware security modules (HSMs), and enterprise secrets platforms. The role partners closely with Security Services, infrastructure, cloud, application, and product teams to ensure cryptographic services are reliable, scalable, and aligned with GM security standards and regulatory requirements.

What You'll Do
  • Serve as the primary subject matter expert for at least one major PKI or secrets platform (e.g., enterprise CAs, HSM-backed key management, or central secrets management platform), including strategy, architecture, and day-to-day engineering
  • Design, implement, and maintain certificate lifecycle management solutions supporting servers, applications, devices, and services across on-prem and cloud environments
  • Engineer, harden, and operate PKI components, including root and subordinate CAs, OCSP/CRL infrastructure, key storage, and associated monitoring and audit capabilities
  • Lead design and integration of secrets management patterns (e.g., application secrets, API keys, database credentials, service identities), driving standardization and automation for onboarding new use cases
  • Define and document PKI and secrets management standards, patterns, and reference architectures for use by application and infrastructure teams across GM
  • Provide technical leadership on Cyber Security projects related to identity, access, encryption, and secure connectivity, ensuring PKI and secrets requirements are captured, implemented, and validated
  • Collaborate with software, cloud, and infrastructure teams to embed secure-by-default cryptographic practices (e.g., TLS, mutual auth, certificate pinning, key rotation) in platforms and services
  • Lead root cause analysis and remediation for PKI/secrets-related incidents or outages, driving durable fixes, improved monitoring, and lessons-learned back into standards and runbooks
  • Develop automation and tooling (e.g., scripting, APIs, workflows) to reduce manual certificate and secrets operations, improve consistency, and increase coverage across fleets and environments
  • Participate in threat analysis and risk assessment activities where cryptography, keys, and certificates are central controls, translating findings into practical mitigation plans
  • Mentor and support other engineers on PKI, cryptography, and secrets management topics; provide clear guidance, design reviews, and hands-on assistance to project and platform teams
  • Represent the PKI & Secrets Management domain in internal forums, architecture reviews, and change control, ensuring changes that impact cryptographic services are well understood and properly evaluated
  • Contribute to and help own security metrics and KPIs related to certificate hygiene, secrets lifecycle health, coverage, and platform reliability; drive action plans when targets are not met
  • Lead development and execution of Cyber Security projects where PKI, certificate management, and secrets are primary enablers, from requirements definition through design, implementation, and operational transition
  • Exercise independent judgment on significant cryptographic and platform decisions, balancing security, reliability, and developer experience, and clearly articulating tradeoffs to stakeholders
  • Act as a recognized senior Cyber Security engineer with deep expertise in PKI & secrets and broad knowledge of adjacent areas (identity, network security, cloud security, compliance, and risk)
  • Break complex security and reliability problems into actionable initiatives, orchestrating work across Security Services, infrastructure, and application teams
  • Champion change management by driving adoption of updated PKI roots/intermediates, new secrets patterns, and improved lifecycle processes across legacy and modern platforms
  • Serve as a mentor and go-to resource for junior and mid-level Cyber Security engineers, modeling GM's behaviors and engineering best practices


Your Skills & Abilities (Required Qualifications):
  • Bachelor's degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, Information Technology, or a closely related field; or equivalent experience
  • Strong hands-on experience with enterprise PKI concepts and technologies, including: X.509 certificates, key pairs, certificate chains, and trust stores
  • Certificate issuance, renewal, revocation, CRLs/OCSP, and policy definition
  • Operating or integrating with certificate authorities and HSM-backed key storage
  • Practical experience designing or operating secrets management solutions (e.g., application secrets, service identities, API keys, credential rotation patterns) in large-scale environments
  • Solid understanding of network security and secure communications (TLS, mTLS, cipher suites, protocol hardening, certificate validation)
  • Demonstrated ability to own and deliver complex security engineering projects end-to-end with minimal direction, including planning, execution, and stakeholder communication
  • Strong problem-solving skills and experience troubleshooting PKI, certificate, and secrets-related failures in distributed systems
  • Ability to communicate complex technical concepts clearly to both engineers and non-technical partners, and to influence design decisions across teams
  • Demonstrated alignment with GM behaviors (Think Customer, Be Inclusive, It's on All of Us, Innovate Now, Look Ahead, One Team, Be Bold, Win with Integrity) in day-to-day work


What Will Give You A Competitive Edge (Preferred Qualifications):

  • Experience operating PKI or secrets services in hybrid or multi-cloud environments
  • Familiarity with identity and access management (IAM) platforms, directory services, and authentication/authorization patterns that depend on PKI and secrets
  • Experience developing automation for certificate and secrets lifecycle (scripting, APIs, CI/CD integrations, or configuration management tools)
  • Prior experience in a large enterprise or regulated environment where cryptographic controls support audit, compliance, or regulatory requirements
  • Experience mentoring other engineers or informally leading technical workstreams within a security or infrastructure team


Benefits Overview

From day one, we're looking out for your well-being-at work and at home-so you can focus on realizing your ambitions. Learn how GM supports a rewarding career that rewards you personally by visiting Total Rewards resources.

About General Motors

General Motors Company engages in the manufacture and sale of cars and trucks in the United States, China, Brazil, Germany, the United Kingdom, Canada, and Italy. It offers sedans, crossovers, sport utility vehicles, pick-up trucks, coupes, sports/convertibles and hybrid vehicles, hatchbacks/wagons, and vans, as well as mini cars in India. The company also provides parts and accessories, such as iPod and MP3 compatibility, mobility accessories, performance parts, AC parts and services, and merchandise. In addition, it offers vehicle safety, security, and information services. The company provides used vehicles. It offers its products through dealers and distributors. General Motors Company was formerly known as NGMCO, Inc. and changed its name to General Motors Company in July 2009. The company was incorporated in 2009 and is based in Detroit, Michigan. It operates manufacturing facilities in India, the United States, and Canada. General Motors Company operates as a subsidiary of the United States Department of The Treasury. General Motors led global vehicle sales for 77 consecutive years from 1931 through 2007, longer than any other automaker, and is currently among the world's largest automakers by vehicle unit sales. General Motors acts in most countries outside the USA via wholly-owned subsidiaries but operates in China through 10 joint ventures. GM's OnStar subsidiary provides vehicle safety, security, and information services. In 2009, General Motors shed several brands, closing Saturn, Pontiac, and Hummer, and emerged from a government-backed Chapter 11 reorganization. In 2010, GM made an initial public offering IPOs to date and returned to profitability later that year.

General Motors Careers

Join the dynamic team at General Motors, a global leader in automotive innovation and technology. At General Motors, we offer unparalleled job opportunities that propel your career forward while contributing to a legacy of engineering excellence.

Work You’ll Do

Embark on a career with General Motors to drive the future of mobility. Our team is dedicated to redefining the automotive landscape through innovation and leadership in electric vehicles and sustainable solutions. By joining us, you will be part of a culture that values diversity, teamwork, and continuous professional growth.

Transform Your Career

General Motors is not just a company; it's a community where you can grow your skills alongside the best in the industry. Our leadership is committed to providing every employee—from interns to senior professionals—with opportunities for career advancement, leadership development, and diversity training.

Innovate and Lead

At General Motors, innovation is at the core of everything we do. From research and development to manufacturing, our teams work collaboratively to lead the industry with cutting-edge technologies and sustainable practices. We encourage our employees to think big and push the boundaries of what’s possible.

Join Our Global Team

As part of our global workforce, you will collaborate with talented individuals who are passionate about shaping the future of transportation. General Motors offers a variety of career paths in engineering, design, IT, marketing, and more. With over 155,000 employees worldwide, our network provides expansive opportunities for networking and professional development.

Internship Programs and Employment Benefits

Start your career journey with a General Motors internship, where you can apply your academic knowledge to real-world projects. Our internships provide a robust foundation in the automotive industry, with mentorship from experienced leaders. Full-time employees enjoy a wealth of benefits, including comprehensive health care, retirement plans, and performance bonuses, ensuring that your hard work is rewarded.

Explore Job Opportunities

Whether you’re a seasoned professional or a recent graduate, General Motors offers positions that leverage your unique skills. Our hiring process is designed to identify and nurture talent, focusing on aligning your capabilities with the right opportunities for growth within the company.

Stay Connected

Join Our Team Search open positions that match your skills and interests. At General Motors, we look for innovative, driven, and solution-oriented team players. Explore the possibilities that await you in a career at General Motors.

Keep Up to Date

Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who drive success at General Motors.

Job Alert Emails

Customize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities available at General Motors. Embark on a journey of growth, innovation, and leadership at General Motors. Shape your future in an environment that fosters diversity, learning, and the pursuit of excellence. Join us and redefine the roads of tomorrow.
Learn more about General Motors
Size
157,000 employees
Market Cap
$46.9 billion
Industry
Net Income
$6.4 billion
Founded
1908
5 Year Trend
-3.2%
Revenue
$122.4 billion
NASDAQ

Similar Jobs

More Jobs at General Motors

More Information Technology Jobs

Find similar Cybersecurity Engineer - PKI & Secrets Management jobs: