Lead Authentication Engineer

Allstate is seeking a Lead Authentication Engineer to own the strategy, design, and delivery of secure, scalable identity and access solutions across our financial and insurance platforms. In this senior manager-level role, you'll architect authentication services using OAuth/OIDC, SSO, MFA, and modern security patterns while guiding a team of engineers. You'll partner with security, product, and architecture to ensure compliance and resilience, mentor talent, and drive continuous improvement in a collaborative, flexible, and learning-focused culture dedicated to protecting millions of customers.

Responsibilities

• Lead design and implementation of secure authentication and authorization services for Allstate's digital platforms
• Architect identity solutions leveraging SSO, OAuth/OIDC, MFA, and related security standards
• Guide engineering team on best practices for security, reliability, and performance in auth services
• Collaborate with security, product, and architecture teams to align identity solutions with business needs
• Own roadmap and technical direction for authentication platforms and APIs
• Ensure compliance with regulatory and industry security standards within financial services
• Mentor engineers, conduct code reviews, and drive continuous improvement of engineering practices
• Monitor, troubleshoot, and optimize authentication services for scalability and uptime
• Evaluate and integrate third-party identity providers and tools as needed
• Document architectures, patterns, and operational runbooks for authentication systems

Required Skills

• Identity and Access Management (IAM)
• OAuth 2.0 and Open
• (OIDC)
• Single Sign-On (SSO) and SAMLMulti-Factor Authentication (MFA)
• API design and microservices architecture
• Cloud platforms (AWS, Azure, or GCP)
• Zero Trust and security best practices
• Programming in a modern language (e.g., Java, C#, or similar)
• CI/CD and Dev
• Sec
• Ops practices
• Monitoring, logging, and incident response for auth services