Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
About the Role
The Cyber Security Engineer – PKI & Secrets Management acts as a senior domain expert, providing technical leadership and hands-on engineering for certificate lifecycle management, key management, HSMs, and enterprise secrets platforms. This role partners with various teams to ensure cryptographic services are reliable, scalable, and meet GM security standards and regulatory requirements.
Responsibilities
- Serve as the primary subject matter expert for PKI or secrets platforms, including strategy, architecture, and engineering.
- Design, implement, and maintain certificate lifecycle management solutions for on-prem and cloud environments.
- Engineer, harden, and operate PKI components, including CAs, OCSP/CRL infrastructure, and key storage.
- Lead design and integration of secrets management patterns, driving standardization and automation.
- Define and document PKI and secrets management standards, patterns, and reference architectures.
- Provide technical leadership on Cyber Security projects related to identity, access, encryption, and secure connectivity.
- Collaborate with software, cloud, and infrastructure teams to embed secure-by-default cryptographic practices.
- Lead root cause analysis and remediation for PKI/secrets-related incidents.
- Develop automation and tooling to reduce manual certificate and secrets operations.
- Participate in threat analysis and risk assessment activities where cryptography is a central control.
- Mentor and support other engineers on PKI, cryptography, and secrets management topics.
- Represent the PKI & Secrets Management domain in internal forums, architecture reviews, and change control.
- Contribute to security metrics and KPIs related to certificate hygiene and secrets lifecycle health.
- Lead development and execution of Cyber Security projects where PKI, certificate management, and secrets are primary enablers.
- Exercise independent judgment on significant cryptographic and platform decisions.
- Act as a recognized senior Cyber Security engineer with deep expertise in PKI & secrets.
- Break complex security and reliability problems into actionable initiatives.
- Champion change management by driving adoption of updated PKI roots/intermediates and new secrets patterns.
- Serve as a mentor and go-to resource for junior and mid-level Cyber Security engineers.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, Information Technology, or a closely related field; or equivalent experience.
- Strong hands-on experience with enterprise PKI concepts and technologies, including X.509 certificates, key pairs, certificate chains, and trust stores.
- Experience with certificate issuance, renewal, revocation, CRLs/OCSP, and policy definition.
- Experience operating or integrating with certificate authorities and HSM-backed key storage.
- Practical experience designing or operating secrets management solutions in large-scale environments.
- Solid understanding of network security and secure communications (TLS, mTLS, cipher suites, protocol hardening, certificate validation).
- Demonstrated ability to own and deliver complex security engineering projects end-to-end with minimal direction.
- Strong problem-solving skills and experience troubleshooting PKI, certificate, and secrets-related failures in distributed systems.
- Ability to communicate complex technical concepts clearly to both engineers and non-technical partners.
- Demonstrated alignment with GM behaviors.
Skills
- PKI
- Secrets Management
- Certificate Lifecycle Management
- Key Management
- Hardware Security Modules (HSMs)
- Enterprise Secrets Platforms
- X.509 Certificates
- Certificate Issuance
- Certificate Renewal
- Certificate Revocation
- CRLs/OCSP
- Trust Stores
- Network Security
- TLS
- mTLS
- Automation
- Scripting
- APIs
- CI/CD Integrations
- Configuration Management Tools
- Identity and Access Management (IAM)
- Directory Services
- Authentication/Authorization Patterns
Location
- On-prem
- Cloud
Work Type
- Full-time
Experience Level
- Senior
- Expert
Education Level
- Bachelor's degree
Benefits
- Support for a rewarding career that rewards you personally
About the Company
- Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.
- We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture.
- Every day, we want every employee to feel they belong to one General Motors team.
Equal Opportunity
- General Motors is committed to being a workplace that is not only free of unlawful discrimination, but one that genuinely fosters inclusion and belonging.
- We strongly believe that providing an inclusive workplace creates an environment in which our employees can thrive and develop better products for our customers.
- All employment decisions are made on a non-discriminatory basis without regard to sex, race, color, national origin, citizenship status, religion, age, disability, pregnancy or maternity status, sexual orientation, gender identity, status as a veteran or protected veteran, or any other similarly protected status in accordance with federal, state and local laws.
- We encourage interested candidates to review the key responsibilities and qualifications for each role and apply for any positions that match their skills and capabilities.
- Applicants in the recruitment process may be required, where applicable, to successfully complete a role-related assessment(s) and/or a pre-employment screening prior to beginning employment.
- General Motors offers opportunities to all job seekers including individuals with disabilities.
- If you need a reasonable accommodation to assist with your job search or application for employment, email us or call us at 1-800-865-7580.