Senior PBAC & PlainID Engineering Lead

Deloitte France; Los Angeles (CA); On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte Cyber seeks a seasoned PlainID IAM specialist to lead policy design, integration, and governance for client environments in a role with substantial travel. You will partner with enterprise architects, drive PBAC/ABAC implementations, and guide complex integrations with Okta, MS Entra, and API gateways, while ensuring regulatory compliance and robust audit trails.

You will own policy lifecycle activities, document runbooks and diagrams, and steer go-live readiness, proving strong

Qualifications

• 7+ years of total experience including hands-on PlainID and access management.
• 3+ years with PBAC and how it maps to enterprise use cases.
• 3+ years with complex integrations/connectors for PIP integration.
• Strong knowledge of compliance including SOX, GDPR, and ISO standards.
• Experience with identity providers and protocols: OAuth 2.0, OpenID Connect, SAML, JWT.
• Policy-as-code concepts and reading/writing structured policy logic.
• Knowledge of APIs/microservices and at least one API gateway (Apigee, Kong, Azure API Management).
• CAB/change governance, release management, and stakeholder management.
• Advanced troubleshooting of PlainID integration.
• Ability to travel 25-50% and potential immigration sponsorship.

Responsibilities

• Configure and implement the PlainID Authorization Platform within client environments.
• Lead technical discussions with Enterprise architects and IAM stakeholders.
• Lead a PBAC team for delivery.
• Design fine-grained, ABAC policies translating business rules into controls.
• Integrate PlainID with identity providers, API gateways, microservices, and data platforms.
• Support full policy lifecycle using policy modeling and policy-as-code.
• Run requirements sessions to document current-state access patterns and target-state model.
• Troubleshoot policy conflicts and integration issues across the stack.
• Lead testing, validation, and go-live activities with access-decision auditing.
• Produce documentation: policy catalogs, integration diagrams, runbooks.
• Partner with engagement leads to keep delivery on track and surface risks.
• Stay current on PlainID roadmap and new capabilities.
• Establish runbooks, SOPs, knowledge articles, and documentation standards.
• Lead conversations with stakeholders and vendors to resolve defects and dependencies.

Skills

Policy governance

Stakeholder management

Executive communication

Tools

PlainID

OAuth 2.0

OpenID Connect

SAML

JWT

Apigee

Kong

Azure API Management

Job description

Deloitte Cyber seeks a seasoned PlainID IAM specialist to lead policy design, integration, and governance for client environments in a role with substantial travel. You will partner with enterprise architects, drive PBAC/ABAC implementations, and guide complex integrations with Okta, MS Entra, and API gateways, while ensuring regulatory compliance and robust audit trails.

You will own policy lifecycle activities, document runbooks and diagrams, and steer go-live readiness, proving strong