Lead Platform Engineer IND

The information contained herein is not intended to be an all-inclusive list of the duties and responsibilities of the job, nor are they intended to be an all-inclusive list of the skills and abilities required to do the job. Management may, at its discretion, assign or reassign duties and responsibilities to this job at any time. The Position Profile is company confidential, and its sole use is for documenting the key components of positions at FM.

About us:

We are a highly successful 190-year-old, Fortune 500 commercial property insurance company of 6,000+ employees with a unique focus on science and risk engineering. Businesses worldwide trust our expertise to protect their assets, relying on our comprehensive risk assessments and robust,

engineering-based insurance solutions to safeguard against fire, natural disasters, and other perils. Serving over a quarter of the Fortune 500 and major corporations globally, we deliver data-driven strategies that enhance resilience, ensure business continuity, and empower organizations to thrive.

FM India is a strategic location for driving our global operational efficiency. Our presence in India allows us to leverage the countrys talented workforce and advance our capabilities to serve our clients better. We have diverse corporate functions that emphasize research, advanced technologies like AI and

analytics, risk engineering, research, finance, marketing, HR, etc. working together to provide innovative solutions and nurture lasting relationships from co-workers to clients.

Role Title: Lead Platform Engineer IND

Position Summary

The Lead Platform Engineer IND supports FMs enterprise authorization and Role-Based Security function, with primary technical leadership for the reliability, integration, and continued evolution of the PlainID authorization platform and its supporting Azure/AKS services.

This role combines platform and Site Reliability Engineering practices with authorization policy engineering, authorization-data analysis, application integration, and access governance. The engineer will work with security, application, data, architecture, infrastructure, and vendor teams to deliver secure, reliable, auditable authorization services and to support FMs continued modernization from legacy authorization capabilities.

Key Responsibilities

Authorization Platform Reliability and Operations

• Support the availability, performance, security, and recoverability of PlainID and supporting Azure/AKS services.
• Maintain monitoring, dashboards, alerts, logs, and operational telemetry.
• Support controlled deployments, CI/CD, testing, validation, change management, and rollback.
• Respond to incidents, perform root-cause analysis, and implement monitoring, automation, and reliability improvements.
• Participate in production support, recovery testing, and on-call coverage.

Authorization Data and Application Integration

• Support PlainID data sources, identity and asset information, authorization scopes, and integrations with Entra ID, Active Directory, databases, APIs, event streams, and batch processes.
• Use SQL, APIs, and logs to reconcile authorization results and identify policy, mapping, data, or integration defects.
• Support application onboarding and validate role retrieval, entitlements, contextual access, and permit/deny decisions.
• Develop automation for testing, deployment, troubleshooting, and repeatable operational activities.

Authorization Policy, Roles, and Entitlements

• Design, test, deploy, and maintain authorization policies, roles, entitlements, identities, assets, and related configuration.
• Translate business and application requirements into maintainable RBAC, PBAC, attribute-based, and contextual authorization models.
• Support requests for new or changed roles, entitlements, policies, data access, and default-access templates.
• Troubleshoot differences between intended and actual access outcomes.

Access Governance and Modernization

• Apply least privilege, separation of duties, approval, auditability, secrets-management, and traceable-change requirements.
• Support access reviews, audit evidence, control validation, and remediation.
• Contribute to migration from legacy authorization capabilities to PlainID, including dependency discovery, testing, reconciliation, rollout, and documentation.
• Promote reusable authorization patterns and reduce unnecessary technology coupling.

Preferred Qualifications

• PlainID or comparable externalized authorization platform.
• Microsoft Azure and AKS.
• Dynatrace or comparable observability platform.
• Helm, containerized services, and CI/CD pipelines.
• Microsoft Entra ID and Active Directory.
• PostgreSQL, SQL Server, event streams, and batch/data integrations.
• Access reviews, audit support, or security-control experience.
• Legacy authorization modernization or migration experience.
• SRE practices including SLIs/SLOs, recovery automation, resilience testing, and disaster recovery.
• Sailpoint knowledge and/or experience

Must-Have Skills

• IAM (Identity & Access Management)
• Access Governance
• RBAC (Role-Based Access Control)
• ABAC/PBAC (Attribute-Based / Policy-Based Access Control)
• Authorization Platforms (PlainID or SailPoint)
• SQL & Relational Databases
• API Integration
• Azure Cloud
• Kubernetes
• CI/CD Pipelines
• Automation & Scripting
• Production Support (Incident Management & RCA)

Education and Certifications:

4 Year / Bachelors Degree required

Work location: Bengaluru