Senior PBAC & PlainID Engineering Manager

Deloitte France; San Antonio (TX); On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte France’s Cyber team is seeking a seasoned PlainID professional to design and implement PBAC/ABAC policies, integrate with major identity providers and API gateways, and lead a delivery team across client environments.

You will manage policy lifecycles, run requirements sessions, troubleshoot integration issues, and produce clear documentation while advancing PlainID capabilities and governance practices.

Qualifications

• 7+ years total experience including PlainID and access management implementation.
• 3+ years with PBAC and enterprise use cases.
• 3+ years integrating complex connectors for PIP integration.
• Knowledge of SOX, GDPR, ISO standards.
• Experience with identity providers and protocols: OAuth 2.0, OpenID Connect, SAML, JWT.
• Policy-as-code concepts and reading/writing policy logic.
• APIs/microservices architectures and at least one API gateway (Apigee, Kong, Azure API Management).
• CAB/change governance, release management, and stakeholder management.
• Advanced troubleshooting with PlainID integration.

Responsibilities

• Configure and implement PlainID in client environments with policy modelling.
• Lead technical discussions with enterprise architects and IAM stakeholders.
• Lead a PBAC team for delivery.
• Design ABAC policies including row- and column-level access when needed.
• Integrate PlainID with Okta, Entra ID, Ping, ForgeRock, API gateways, microservices, Snowflake/BigQuery.
• Policy lifecycle management: authoring, testing, versioning, deployment.
• Run requirements sessions with client stakeholders to map target-state authorization.
• Troubleshoot conflicts and integration issues across the stack.
• Lead testing, validation, and go-live activities with access-decision auditing.
• Produce technical documentation: policy catalogs, diagrams, runbooks.
• Coordinate with engagement leads and architects to surface risks early.
• Stay current on PlainID roadmap and new capabilities like AI agent/machine-identity authorization.
• Establish runbooks, SOPs, knowledge articles and documentation standards.
• Lead conversations with stakeholders, teams, and vendors to resolve defects and dependencies.

Skills

PlainID

PBAC

Access management

OAuth 2.0

OpenID Connect

SAML/JWT

APIs & microservices

Policy-as-code

CAB/change governance

Stakeholder management

Travel readiness

Tools

Okta

Microsoft Entra ID

Ping Identity

ForgeRock

Apigee

Kong

Azure API Management

Snowflake

BigQuery

CAB/Policy tooling

Job description

Deloitte France’s Cyber team is seeking a seasoned PlainID professional to design and implement PBAC/ABAC policies, integrate with major identity providers and API gateways, and lead a delivery team across client environments.

You will manage policy lifecycles, run requirements sessions, troubleshoot integration issues, and produce clear documentation while advancing PlainID capabilities and governance practices.