Lead PlainID & PBAC Engineering Manager

Deloitte France; Cincinnati (OH); On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte is seeking a seasoned PlainID engineer in the US to lead PBAC implementations, policy modeling, and integration with Okta and API gateways. You will drive delivery, architecture discussions, and governance across client engagements, ensuring secure, scalable access controls.

The role requires deep experience with identity platforms, policy-as-code, and enterprise-level collaboration. This on-site position offers growth in a Big 4 environment and travel to client sites.

Qualifications

• 7+ years of total experience with PlainID
• 3+ years in PBAC mapping to enterprise use cases
• 3+ years integrating complex connectors for PIP integration
• Strong knowledge of compliance including SOX, GDPR, ISO standards
• Experience with OAuth 2.0, OpenID Connect, SAML, JWT
• Policy-as-code concepts and Rego-like rules
• Experience with API gateways (Apigee, Kong, Azure API Management)
• CAB/change governance, release management, and stakeholder management
• Advanced troubleshooting with PlainID integration
• Willingness to travel 25-50%
• Limited immigration sponsorship may be available

Responsibilities

• Configure and implement the PlainID Authorization Platform within client environments, including policy modelling and setup.
• Lead technical discussions with Enterprise architects and IAM stakeholders.
• Lead a PBAC team for successful and seamless delivery.
• Design fine-grained ABAC policies translating business rules into technical controls.
• Integrate PlainID with client identity providers and data platforms.
• Support the full policy lifecycle - authoring, testing, versioning, deployment.
• Run requirements sessions to document current-state access patterns and design target-state models.
• Troubleshoot policy conflicts, integration issues, and authorization errors across the stack.
• Lead testing, validation, and go-live activities including access-decision auditing.
• Create technical documentation: policy catalogs, diagrams, runbooks for client and delivery team.
• Partner with engagement leads to keep delivery on track and surface risks early.
• Stay current on PlainID roadmap including AI/agent capabilities.
• Establish runbooks, SOPs, knowledge articles, and documentation standards.
• Lead conversations with stakeholders and vendors to resolve defects and dependencies

Skills

PlainID integration

Policy-as-code

APIs & microservices

Identity protocols (OAuth2, OIDC, SAML

CAB/change governance

Technical leadership

Troubleshooting

Tools

Apigee

Kong

Azure API Management

Okta

Microsoft Entra ID

Ping Identity

ForgeRock

Job description

Deloitte is seeking a seasoned PlainID engineer in the US to lead PBAC implementations, policy modeling, and integration with Okta and API gateways. You will drive delivery, architecture discussions, and governance across client engagements, ensuring secure, scalable access controls.

The role requires deep experience with identity platforms, policy-as-code, and enterprise-level collaboration. This on-site position offers growth in a Big 4 environment and travel to client sites.