[Hiring] Lead Engineer, Authentication Engineering @Allstate

Role Description

We are seeking a highly technical and innovative Lead Engineer, Authentication Engineering to lead the design, implementation, and advancement of enterprise authentication platforms. Multiple Managing Engineers for authentication teams will report to this role. This role will provide technical leadership for authentication solutions, including directory infrastructure, multi-factor authentication (MFA), PKI, privileged access management and vaulting solutions and an in-house developed application for password and MFA management.

The successful candidate will partner closely with Product Management, Cybersecurity, Infrastructure Engineering, Application Teams, and Operations to deliver secure, scalable, and resilient authentication capabilities that align with strategic directions including AI enablement, Zero Trust, Infrastructure as Code, and automation.

Key Responsibilities

• Partner with Authentication Lead Product Manager for creation of strategy, roadmaps, prioritization, and implementation of solutions.
• Lead the strategy, architecture, and engineering of enterprise authentication solutions, ensuring they meet business needs while delivering a secure, seamless user experience.
• Design, implement, and modernize authentication solutions, including MFA, PKI, SSO, privileged access management, vaulting, and cloud-native authentication platforms to enable Zero Trust capabilities including passwordless, phishing-resistant authentication, Just-In-Time (JIT) and Just-Enough (JEA) access.
• Drive increased automation and Infrastructure as Code including test driven development practices for validation and control testing.
• Lead large-scale authentication migrations and technology transformations, while continuously improving platforms to reduce user friction and increase adoption.
• Partner with security, infrastructure, cloud, application, and AI teams to deliver scalable, resilient authentication services and support security integration into application and automation, AI workflows, agentic AI capabilities.
• Provide technical leadership and people development by coaching Managing Engineers, leading technical product design reviews, and providing direction for engineering best practices.
• Influence clients and partners to prioritize for enterprise benefit and risk reduction and assist in driving the adoption of technology solutions that leverage existing patterns, practices, and reference architectures.
• Strengthen the organization’s security posture by implementing and enhancing controls to address gaps and vulnerabilities identified through audits, assessments, red team, penetration testing, vulnerability scanning, and proactive threat modeling.
• Own the reliability, resiliency, and operational excellence of authentication services by defining and achieving SLOs, improving service availability and performance, instrumenting and enhancing observability, and leading incident response efforts to reduce MTTR.
• Evaluate emerging technologies and industry trends, establish engineering standards and best practices, and provide technical leadership across authentication domains.

Qualifications

• 10+ years of Information Technology or Engineering experience with authentication, identity or security engineering accountabilities.
• 4+ years management experience.
• Experience leading enterprise large-scale projects.

Technical Skills

• Strong knowledge of authentication protocols (SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate based authentication, etc.).
• Experience implementing on-prem and cloud authentication solutions (AWS, Azure, GCP).
• Strong Expertise with Active Directory and Entra ID.
• Experience with multifactor solutions (Microsoft Authenticator, Duo, etc.).
• Experience with hardware tokens/smart cards for TOTP, FIDO2, PIV (Duo, Thales, Yubikey, etc.).
• Experience with Privileged Access Management and Vaulting solutions (CyberArk, Hashicorp, Azure Key Vault, AWS Secrets Manager, GCP Secrets Manager, etc.).
• Experience with PKI solutions such as Active Directory Certificate Services (AD CS); Hashicorp, Entrust, Sectigo, DigiCert, etc.
• Experience with automation of authentication solutions and processes.
• Experience automated deployments deploying configurations leveraging CI/CD pipelines utilizing technologies like GitHub, Jenkins, GitHub Actions, Terraform, Ansible, etc.
• Scripting experience (PowerShell, Python, etc.).

Desired Skills

• Understanding of authentication attack techniques, threat actors, and exploitation methods and controls to mitigate.
• Understanding security standards and compliance requirements (NIST, ISO, PCI, HIPAA, Sox, etc.).
• Understanding of Full Stack Java development.

Supervisory Responsibilities

This role does not have supervisory responsibilities.

Primary Skills

• Access Management
• Artificial Intelligence (AI)
• Authentication
• Automated Deployments
• AWS Secrets Manager
• Certificate Services
• Infrastructure as Code (IaC)
• IT Security Operations
• Kerberos
• Microsoft PowerShell
• OAuth
• ... {+ 20 more}

Recruiter Info

Yateesh B G
[email protected]

Company Description

Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.

The Allstate Corporation is one of the largest publicly held insurance providers in the United States. Ranked No. 84 in the 2023 Fortune 500 list of the largest United States corporations by total revenue, The Allstate Corporation owns and operates 18 companies in the United States, Canada, Northern Ireland, and India.

Allstate India Private Limited, also known as Allstate India, is a subsidiary of The Allstate Corporation. The India talent center was set up in 2012 and operates under the corporation's Good Hands promise. As it innovates operations and technology, Allstate India has evolved beyond its technology functions to be the critical strategic business services arm of the corporation.