[Hiring] Lead Engineering, Authentication Engineering (Senior Manager) @Allstate

Role Description

We are seeking a highly technical and innovative Lead Engineering, Authentication Engineering (Senior Manager) to lead the design, implementation, and advancement of enterprise authentication platforms. Multiple Managing Engineering’s for authentication teams will report to this role. This role will provide technical leadership for authentication solutions, including:

• Directory infrastructure
• Multi-factor authentication (MFA)
• PKI
• Privileged access management
• Vaulting solutions
• An in-house developed application for password and MFA management

The successful candidate will partner closely with Product Management, Cybersecurity, Infrastructure Engineering, Application Teams, and Operations to deliver secure, scalable, and resilient authentication capabilities that align with strategic directions including:

• AI enablement
• Zero Trust
• Infrastructure as Code
• Automation

Accountabilities

• Partner with Authentication Lead Product Manager for creation of strategy, roadmaps, prioritization, and implementation of solutions.
• Lead the strategy, architecture, and engineering of enterprise authentication solutions, ensuring they meet business needs while delivering a secure, seamless user experience.
• Design, implement, and modernize authentication solutions, including MFA, PKI, SSO, privileged access management, vaulting, and cloud-native authentication platforms to enable Zero Trust capabilities.
• Drive increased automation and Infrastructure as Code including test driven development practices for validation and control testing.
• Lead large-scale authentication migrations and technology transformations while continuously improving platforms to reduce user friction and increase adoption.
• Partner with security, infrastructure, cloud, application, and AI teams to deliver scalable, resilient authentication services.
• Provide technical leadership and people development by coaching Managing Engineerings, leading technical product design reviews, and providing direction for engineering best practices.
• Influence clients and partners to prioritize for enterprise benefit and risk reduction.
• Strengthen the organization’s security posture by implementing and enhancing controls to address gaps and vulnerabilities.
• Own the reliability, resiliency, and operational excellence of authentication services.
• Evaluate emerging technologies and industry trends, establish engineering standards and best practices.

Qualifications

• 5-10+ years of Information Technology or Engineering experience with authentication engineering accountabilities.
• 3+ years management experience.
• Experience leading enterprise large-scale projects.

Technical Skills

• Strong expertise with Active Directory and Entra ID.
• Experience with PKI solutions such as Active Directory Certificate Services (AD CS); Hashicorp, Entrust, Sectigo, DigiCert, etc.
• Experience with multifactor solutions such as Microsoft Authenticator, Duo, etc.
• Experience implementing on-prem and cloud authentication solutions (AWS, Azure, and/or GCP).
• Experience with automation of authentication solutions and processes.
• Experience deploying configurations leveraging CI/CD pipelines utilizing technologies like GitHub, Jenkins, GitHub Actions, Terraform, Ansible, etc.

Bonus Qualifications

• Experience with Privileged Access Management and Vaulting solutions (CyberArk, Hashicorp, Azure Key Vault, AWS Secrets Manager, GCP Secrets Manager, etc.).
• Experience with hardware tokens/smart cards for TOTP, FIDO2, PIV (Duo, Thales, Yubikey, etc.).
• Strong knowledge of authentication protocols such as SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate based authentication, etc.
• Understanding of authentication attack techniques, threat actors, and exploitation methods and controls to mitigate.
• Scripting experience (PowerShell, Python, etc.).
• Understanding of Full Stack Java development.
• Understanding security standards and compliance requirements (NIST, ISO, PCI, HIPAA, Sox, etc.).

Compensation

Expected compensation for this role ranges from $121,800.00 - $171,800.00 annually. Actual salary offered to successful candidates will vary based on their skills and experience.

Benefits

• Flexible Work Arrangements.
• Employee discounts (15% on auto and property insurance, plus many other products and services).
• Good Office program (receive up to $400 back after purchasing office equipment).
• Student Loan Payment Matching Program for Government Student loans.
• Comprehensive Retirement Savings Program with employer matched contributions.
• Annual Wellness allowance to support employees with improving health and wellbeing.
• Personal days.
• Tuition Reimbursement.
• Working within the community and giving back.