Job Description
Domain: IAM / Cybersecurity / Authorization
We are looking for an experienced PlainID Developer with strong expertise in Policy-Based Access Control (PBAC), Dynamic Authorization, IAM, and authorization policy management. The candidate will be responsible for designing, developing, configuring, integrating, testing, and supporting PlainID-based authorization solutions across enterprise applications, APIs, microservices, and data platforms.
Key Responsibilities
- Design and implement PlainID authorization solutions using PBAC.
- Develop and manage authorization policies using PlainID Policy Administration Point (PAP).
- Configure and support Policy Decision Point (PDP) and Policy Information Point (PIP) components.
- Develop and configure Dynamic Groups, Rulesets, Conditions, and authorization policies.
- Integrate PlainID with enterprise IAM/IDP systems, applications, APIs, databases, and microservices.
- Implement fine-grained authorization such as role, attribute, resource, and context-based access control.
- Work with PlainID Authorizers / Policy Enforcement Points (PEP) to enforce authorization decisions.
- Develop integrations using REST APIs, SDKs, and custom Authorizers.
- Work with identity and asset attributes required by the PIP to support runtime authorization decisions.
- Integrate PlainID with applications running in cloud, on-premise, and distributed microservices environments.
- Configure and troubleshoot PDP/PIP/PAA deployments.
- Support Kubernetes-based PlainID deployments and configuration where required.
- Develop and maintain Policy-as-Code implementations, including Rego/OPA where applicable.
- Build and consume PlainID Authorization APIs for application integration.
- Implement authorization APIs such as Permit/Deny, Policy Resolution, and User Access Token workflows.
- Troubleshoot authorization failures, policy conflicts, integration issues, and runtime performance problems.
- Support CI/CD integration for policy deployment and lifecycle management.
- Participate in security reviews, testing, documentation, and production support.
Required Skills
- 8+ years of experience in IAM, cybersecurity, application security, or authorization.
- 4+ years hands-on PlainID experience preferred.
- Strong knowledge of PlainID Policy-Based Access Control (PBAC).
- Hands-on experience with:
- PlainID PDP
- PlainID PIP
- PlainID PAA
- Dynamic Groups
- Conditions
- Strong understanding of RBAC, ABAC, PBAC and fine-grained authorization.
- Experience integrating IAM platforms such as SailPoint, Okta, Ping Identity, Microsoft Entra ID/Azure AD, ForgeRock, or similar.
- Strong REST API and JSON experience.
- Experience with microservices and API security.
- Knowledge of OAuth 2.0, OpenID Connect, JWT, SSO and authentication/authorization concepts.
- Experience with SQL/databases and retrieving identity/resource attributes.
- Knowledge of Docker and Kubernetes.
- Experience with Git and CI/CD pipelines.
- Good understanding of cloud environments such as AWS, Azure or GCP.