Cyber Operate - PlainID/PBAC Senior Engineering Management Specialist/Senior Consultant

Deloitte • Chicago, IL

1d • $113,300 - $188,900

About The Position

As an experienced PlainID professional at Deloitte Consulting, you will deliver high-quality work within defined timelines while providing technical leadership to the PlainID team. The role combines deep technical ownership with engineering expertise and governance. You will configure and implement the PlainID Authorization Platform in client environments, design and support fine-grained PBAC/ABAC policies, integrate PlainID with identity providers and other client technologies, and support the full policy lifecycle from authoring and testing through deployment.

You will work with client stakeholders, enterprise architects, IAM teams, engagement leads, internal teams, and third-party vendors to define authorization models, resolve technical issues, support testing and go-live, and maintain governed, repeatable support operations. The role is part of Deloitte Cyber Operate, which operates clients’ critical cyber assets as a managed service or in partnership with clients.

Requirements

• 4+ years of total experience, including strong hands-on experience in PlainID implementation.
• 3+ years of experience with access control models, specifically PBAC, and how they map to enterprise use cases.
• 3+ years of experience integrating and supporting complex integrations and connectors for PIP integration.
• Strong knowledge of ensuring compliance with internal and external regulations, including SOX, GDPR, and ISO standards.
• Experience integrating with identity providers and standard protocols, including OAuth 2.0, OpenID Connect, SAML, and JWT.
• Comfort with policy-as-code concepts and reading or writing structured policy logic, such as Rego or similar rules-based languages.
• Working knowledge of APIs and microservices architectures, plus experience with at least one API gateway such as Apigee, Kong, or Azure API Management.
• Proven ownership of CAB/change governance, release management, and stakeholder management.
• Advanced troubleshooting capability and strong knowledge of PlainID integration.
• Ability to travel 25–50% on average, based on the work and clients served.

Nice To Haves

• Previous consulting or Big 4 experience.
• Experience with RBAC and ABAC.
• Strong documentation, reporting, and executive communication skills.
• Ability to manage vendor coordination.

Responsibilities

• Configure and implement the PlainID Authorization Platform in client environments, including policy modeling and decision-point and information-point setup.
• Lead technical discussions with enterprise architects and IAM stakeholders.
• Design fine-grained attribute-based access policies (PBAC/ABAC) that translate business rules into technical controls, including row- and column-level data access restrictions where needed.
• Integrate PlainID with client identity providers, API gateways, microservices, and data platforms.
• Support the full policy lifecycle, including authoring, testing, versioning, and deployment using visual policy modeling and policy-as-code capabilities.
• Run requirements sessions with client stakeholders to document current-state access patterns and design target-state authorization models.
• Troubleshoot policy conflicts, integration issues, and authorization-decision errors across client technology stacks.
• Support testing, validation, and go-live activities, including access-decision auditing and performance checks.
• Produce technical documentation such as policy catalogs, integration diagrams, and runbooks for clients and internal delivery teams.
• Partner with engagement leads and architects to keep delivery on track and surface risks early.
• Stay current on the PlainID platform roadmap, including capabilities for AI agent and machine-identity authorization.
• Establish and maintain runbooks, SOPs, knowledge articles, and documentation standards for repeatable and governed support operations.
• Coordinate with client stakeholders, internal teams, and third-party vendors to resolve defects, manage dependencies, and improve service outcomes.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and applicable performance factors.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed