PBAC & PlainID Engineering Manager II

Deloitte France; Indianapolis (IN); Hybrid; USD 135,000 - 265,000; Full time

Job summary

Deloitte's Cyber team seeks a seasoned PlainID professional to lead the design and deployment of authorization policies across client environments. You will model PBAC/ABAC rules, integrate with Okta, Microsoft Entra ID, and other identity providers, and guide enterprise architects through technical decision-making.

You will own policy lifecycle tasks, run client workshops, troubleshoot integration issues, and produce runbooks and diagrams.

Qualifications

• 7+ years of total experience in PlainID and access management implementation.

Responsibilities

• Configure and implement the PlainID Authorization Platform within client environments, including policy modelling and setup.
• Lead technical discussions with Enterprise architects and IAM stake holders.
• Lead a PBAC team for successful delivery.
• Design fine-grained, attribute-based access policies (PBAC/ABAC) translating business rules into technical controls.
• Integrate PlainID with identity providers (Okta, Microsoft Entra ID, Ping Identity, ForgeRock) and data platforms like Snowflake/BigQuery.
• Support the full policy lifecycle—from authoring to deployment—using policy modelling and policy-as-code.
• Run requirements sessions with client stakeholders to document current-state access patterns and target-state model.
• Troubleshoot policy conflicts and integration issues across the client's stack.
• Lead testing, validation and go-live activities with access-decision auditing.
• Produce clear technical documentation (policies, diagrams, runbooks) for client and delivery team.
• Partner with engagement leads to keep delivery on track and surface risks early.
• Stay current on PlainID roadmap and AI-related capabilities.

Skills

PlainID

Access management

PBAC

ABAC

Policy-as-code

CAB/change governance

APIs/microservices

Tools

OAuth 2.0

OpenID Connect

SAML

JWT

Apigee

Kong

Azure API Management

Job description

Deloitte's Cyber team seeks a seasoned PlainID professional to lead the design and deployment of authorization policies across client environments. You will model PBAC/ABAC rules, integrate with Okta, Microsoft Entra ID, and other identity providers, and guide enterprise architects through technical decision-making.

You will own policy lifecycle tasks, run client workshops, troubleshoot integration issues, and produce runbooks and diagrams.