Allstate is seeking a Lead Authentication Engineer to own the strategy, design, and delivery of secure, scalable identity and access solutions across our financial and insurance platforms. In this senior manager-level role, you'll architect authentication services using OAuth/OIDC, SSO, MFA, and modern security patterns while guiding a team of engineers. You'll partner with security, product, and architecture to ensure compliance and resilience, mentor talent, and drive continuous improvement in a collaborative, flexible, and learning-focused culture dedicated to protecting millions of customers.
Responsibilities
- Lead design and implementation of secure authentication and authorization services for Allstate's digital platforms
- Architect identity solutions leveraging SSO, OAuth/OIDC, MFA, and related security standards
- Guide engineering team on best practices for security, reliability, and performance in auth services
- Collaborate with security, product, and architecture teams to align identity solutions with business needs
- Own roadmap and technical direction for authentication platforms and APIs
- Ensure compliance with regulatory and industry security standards within financial services
- Mentor engineers, conduct code reviews, and drive continuous improvement of engineering practices
- Monitor, troubleshoot, and optimize authentication services for scalability and uptime
- Evaluate and integrate third-party identity providers and tools as needed
- Document architectures, patterns, and operational runbooks for authentication systems
Required Skills
- Identity and Access Management (IAM)
- OAuth 2.0 and Open
- ID Connect (OIDC)
- Single Sign-On (SSO) and SAMLMulti-Factor Authentication (MFA)
- API design and microservices architecture
- Cloud platforms (AWS, Azure, or GCP)
- Zero Trust and security best practices
- Programming in a modern language (e.g., Java, C#, or similar)
- CI/CD and Dev
- Sec
- Ops practices
- Monitoring, logging, and incident response for auth services