Principal Security Software Engineer, PKI and Secrets Management

Location: Remote within the United States; the selected candidate is not expected to report to a GM worksite unless directed by the manager. Relocation benefits may be available under company policy.

Salary: $201,600–$309,900 base salary, plus potential incentive pay.

Company

hirify.global develops automotive products and technologies with a vision of Zero Crashes, Zero Emissions, and Zero Congestion.

What you will do

• Define and lead cybersecurity strategy for complex technologies, features, and major programs, and provide technical leadership for development and integration.
• Design, build, and maintain security-focused software components, services, APIs, automation frameworks, and internal platforms.
• Integrate identity, authorization, secrets management, logging, and other security controls into CI/CD pipelines, build systems, and cloud-native deployments.
• Collaborate with application, infrastructure, platform, security, and audit/compliance teams to embed security requirements into system designs and engineering work.
• Conduct secure code, threat-modeling, and design reviews; build security telemetry; and contribute to incident response and post-incident reviews.
• Mentor software engineers, communicate security practices, participate in hiring and interviews, and contribute to projects eligible for patent application.

Requirements

• Bachelor’s degree or higher in Computer Science, Software Engineering, Cybersecurity, or a related technical field, or equivalent practical experience.
• 7+ years of experience as a software engineer building and owning production systems or in-house applications.
• Advanced proficiency in at least one modern programming language, such as Python, Go, Java, or C++, with strong software engineering fundamentals including data structures, algorithms, and design patterns.
• Experience using AI-assisted development tools such as GitHub Copilot, Cursor, or similar tools in day-to-day engineering workflows.
• Experience designing, implementing, and operating services on AWS, Azure, or GCP, including managed services and infrastructure as code.
• Hands-on experience with containerization and orchestration technologies such as Docker and Kubernetes.
• Strong understanding of PKI, certificate issuance and management, encryption in transit and at rest, key and secrets management, secure coding, input validation, and common vulnerability classes including injection, XSS, CSRF, and insecure direct object references.
• Experience partnering with security and audit/compliance teams and translating security requirements into engineering work.
• Ability to plan and manage work in an Agile environment and own features and services from design through production.
• Strong written and verbal communication skills, including the ability to explain identity and security concepts to technical and non-technical audiences.
• Immigration-related sponsorship is not provided; applicants requiring current or future GM immigration sponsorship or work-authorization support should not apply.

Nice to have

• Extensive experience designing and operating PKI and cryptographic services at enterprise scale.
• Experience modernizing and automating security platforms for broad adoption across engineering teams.
• Technical leadership experience, including setting direction and influencing across organizations.
• Strategic thinking, change leadership, and the ability to balance security with business needs.
• Strong integrity, accountability, and communication skills.

Culture & Benefits

• Remote work within the United States, with no regular GM worksite reporting unless directed by the manager.
• Medical, dental, vision, Health Savings Account, Flexible Spending Accounts, retirement savings, sickness and accident benefits, life insurance, and paid vacation and holidays.
• Tuition assistance, employee assistance programs, and GM vehicle discounts.
• Inclusive workplace committed to equal employment opportunity and belonging.
• Applicants may be required to complete role-related assessments and pre-employment screening where applicable.