Senior PBAC & PlainID Engineering Lead

Deloitte France; Minneapolis (MN); On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte’s Cyber team invites experienced PlainID professionals to join a role focused on implementing and optimizing the PlainID Authorization Platform across client environments, including policy modeling and integration with leading IdPs. You will engage with enterprise architects and IAM stakeholders to design robust, scalable access controls.

You will lead a PBAC team, translate business rules into technical controls, manage the policy lifecycle, and deliver clear documentation, runbooks,

Qualifications

• 7+ years of total experience in PlainID and access management.
• 3+ years with access control models—specifically PBAC—and how each maps to real enterprise use cases.
• 3+ years of experience integrating and supporting complex integrations and connectors for PIP integration.
• Must have strong knowledge of ensuring compliance with internal and external regulations, including SOX, GDPR, and ISO standards.
• Experience integrating with identity providers and standard protocols: OAuth 2.0, OpenID Connect, SAML, JWT.
• Comfort with policy-as-code concepts and reading/writing structured policy logic (e.g., Rego or similar rules-based languages).
• Working knowledge of APIs and microservices architectures, plus experience with at least one API gateway (Apigee, Kong, Azure API Management, or similar).
• Proven ownership of CAB/change governance, release management, and stakeholder management.
• Advanced troubleshooting capability with strong knowledge of PlainID integration.

Responsibilities

• Configure and implement the PlainID platform within client environments, including policy modelling and decision-point/information-point setup.
• Lead technical discussions with Enterprise architects and IAM stakeholders.
• Lead a PBAC team for successful and seamless delivery.
• Design fine-grained, attribute-based access policies (PBAC/ABAC) translating business rules into technical controls.
• Integrate PlainID with client identity providers (Okta, Microsoft Entra ID, Ping Identity, ForgeRock) and data platforms like Snowflake or BigQuery.
• Support the full policy lifecycle - authoring, testing, versioning, deployment - using PlainID tools.
• Run requirements sessions with client stakeholders to document current-state access patterns.
• Troubleshoot policy conflicts, integration issues, and authorization-decision errors.
• Lead testing, validation, and go-live activities including access-decision auditing.
• Lead the team to produce policy catalogs, integration diagrams, runbooks.
• Partner with engagement leads and architects to keep delivery on track.
• Stay current on PlainID roadmap including AI agent capabilities.
• Lead the team to establish runbooks, SOPs, and documentation standards.

Skills

PlainID

Access management

PIP integration

OAuth 2.0

CAB/change governance

Policy-as-code

API gateway

RBAC/ABAC

Tools

Okta

Microsoft Entra ID

Ping Identity

ForgeRock

Snowflake

BigQuery

Job description

Deloitte’s Cyber team invites experienced PlainID professionals to join a role focused on implementing and optimizing the PlainID Authorization Platform across client environments, including policy modeling and integration with leading IdPs. You will engage with enterprise architects and IAM stakeholders to design robust, scalable access controls.

You will lead a PBAC team, translate business rules into technical controls, manage the policy lifecycle, and deliver clear documentation, runbooks,