Lead Engineer Authentication Engineering Hybrid

Key responsibilities:

• Partner with Authentication Lead Product Manager for creation of strategy roadmaps prioritization and implementation of solutions.

• Lead the strategy architecture and engineering of enterprise authentication solutions ensuring they meet business needs while delivering a secure seamless user experience.

• Design implement and modernize authentication solutions including MFA PKI SSO privileged access management vaulting and cloud-native authentication platforms to enable Zero Trust capabilities including passwordless phishing-resistant authentication Just-In-Time (JIT) and Just-Enough (JEA) access.

• Drive increased automation and Infrastructure as Code including test driven development practices for validation and control testing

• Lead large-scale authentication migrations and technology transformations while continuously improving platforms to reduce user friction and increase adoption.

• Partner with security infrastructure cloud application and AI teams to deliver scalable resilient authentication services and support security integration into application d automation AI workflows and agentic AI capabilities.

• Provide technical leadership and people development by coaching Managing Engineers leading technical product design reviews and providing direction for engineering best practices.

• Influence partners to prioritize for enterprise benefit and risk reduction and assist in driving the adoption of technology solutions that leverage existing patterns practices and reference architectures.

• Strengthen the organizations security posture by implementing and enhancing controls to address gaps and vulnerabilities identified through audits assessments red team penetration testing vulnerability scanning and proactive threat modelling.

• Own the reliability resiliency and operational excellence of authentication services by defining and achieving SLOs improving service availability and performance instrumenting and enhancing observability and leading incident response efforts to reduce MTTR.

• Evaluate emerging technologies and industry trends establish engineering standards and best practices and provide technical leadership across authentication domains.

Essential Skills:

• All applicants must demonstrate they have a legal right to work in the UK for employment at Allstate. Allstate is not providing sponsorship for this vacancy.

• A minimum of 5 years of Information Technology or Engineering experience with authentication engineering accountabilities.

• A minimum of 3 years managing people.

• Experience leading enterprise large-scale projects.

• Strong expertise with Active Directory and Entra ID.

• Experience implementing and securing PKI solutions.

• Experience implementing cloud-based solutions (AWS Azure and/or GCP)

• Experience with automated deployments (Terraform Ansible GitHub Jenkins etc.)

Desirable Skills:

• Experience with Privileged Access Management and Vaulting solutions (CyberArk Hashicorp Azure Key Vault AWS Secrets Manager GCP Secrets Manager etc.)

• Experience with MFA authenticators (Duo MS Authenticator etc.) and hardware tokens/smart cards for TOTP FIDO2 PIV (Duo Yubikey Thales etc.)

• Strong knowledge of authentication protocols such as SAML OAuth 2.0 OpenID Connect Kerberos LDAP certificate-based authentication etc.

• Understanding of authentication attack techniques threat actors and exploitation methods and controls to mitigate.

• Scripting experience (PowerShell Python etc.)

• Understanding of Full Stack Java development.

• Understanding security standards and compliance requirements (NIST ISO PCI HIPPA Sox etc.).

• Experience leading global teams