Teams at General Motors

Build and operate GM’s internal cloud platform, including self-service infrastructure, APIs, CLI and MCP tools, Kubernetes runtime capabilities, multi-region reliability, and automated delivery workflows. Define technical direction, eliminate developer toil, establish golden paths, improve SLOs and observability, partner with SRE on incidents, mentor engineers, and collaborate with application teams to improve developer experience.

Staff software engineer responsible for designing, building, and operating production authorization services. The role develops role-based, attribute-based, and policy-driven access controls; leads security reviews; builds cloud-native microservices and APIs; establishes engineering standards, observability, and deployment practices; mentors engineers; and supports critical systems through on-call rotations.

Performs offensive product security assessments, penetration testing, vulnerability research, and exploit validation across embedded vehicle software, mobile applications, backend systems, and product services. Identifies attack paths and vulnerabilities, validates impact, provides risk-ranked remediation guidance, and partners with engineering teams to improve secure SDLC practices. The role also develops offensive tooling and testing methods.