{"id":3366928,"url":"https://alion.io/job/allstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote","title":"Lead Engineer, Authentication Engineering, (Sr Mgr Level) - Remote","company":{"id":1921602,"name":"Allstate Corporation","domain":"allstatecorporation.com","url":"https://alion.io/company/allstatecorporation","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":41,"ghost_share":0,"stale_share":0.683,"repost_share":0.024,"time_to_fill_p50_days":20,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":98000,"max_usd":197000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1231},"experience_years_min":10,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Jenkins","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Red Teaming","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false},{"name":"Java","optional":true}],"status":"closed","first_seen_at":"2026-10-27T23:28:19Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-05T04:05:17Z","board_verified":false,"closed_at":"2026-11-05T04:05:17Z","days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.\nJob Description\nWe are seeking a highly technical and innovative Lead Engineer, Authentication Engineering to lead the design, implementation, and advancement of enterprise authentication platforms. Multiple Managing Engineers for authentication teams will report to this role. This role will provide technical leadership for authentication solutions, including directory infrastructure, multi-factor authentication (MFA), PKI, privileged access management and vaulting solutions and an in-house developed application for password and MFA management.The successful candidate will partner closely with Product Management, Cybersecurity, Infrastructure Engineering, Application Teams, and Operations to deliver secure, scalable, and resilient authentication capabilities that align with strategic directions including AI enablement, Zero Trust, Infrastructure as Code, and automation.\nKey Responsibilities\nPartner with Authentication Lead Product Manager for creation of strategy, roadmaps, prioritization, and implementation of solutions.\nLead the strategy, architecture, and engineering of enterprise authentication solutions, ensuring they meet business needs while delivering a secure, seamless user experience.\n Design, implement, and modernize authentication solutions, including MFA,, PKI, SSO, privileged access management, vaulting, and cloud-native authentication platforms to enable Zero Trust capabilities including passwordless, phishing-resistant authentication, Just-In-Time (JIT) and Just-Enough (JEA) access.\nDrive increased automation and Infrastructure as Code including test driven development practices for validation and control testing\nLead large-scale authentication migrations and technology transformations, while continuously improving platforms to reduce user friction and increase adoption.\nPartner with security, infrastructure, cloud, application, and AI teams to deliver scalable, resilient authentication services and support security integration into application d automation, AI workflows, agentic AI capabilities.\nProvide technical leadership and people development by coaching Managing Engineers, leading technical product design reviews, and providing direction for engineering best practices.\nInfluence clients and partners to prioritize for enterprise benefit and risk reduction and assist in driving the adoption of technology solutions that leverage existing patterns, practices, and reference architectures. \nStrengthen the organization’s security posture by implementing and enhancing controls to address gaps and vulnerabilities identified through audits, assessments, red team, penetration testing, vulnerability scanning, and proactive threat modeling.\ngaps identified through\nOwn the reliability, resiliency, and operational excellence of authentication services by defining and achieving SLOs, improving service availability and performance, instrumenting and enhancing observability, and leading incident response efforts to reduce MTTR.\nEvaluate emerging technologies and industry trends, establish engineering standards and best practices, and provide technical leadership across authentication domains.\nEssential Skills\n10+ years of Information Technology or Engineering experience with authentication, identity or security engineering accountabilities. (Preferred)\n3+ years management experience.\nExperience leading enterprise large-scale projects.\nTechnical Skills\nStrong technical expertise and enterprise experience with majority of the following:\nStrong Expertise with Active Directory and Entra ID\nExperience with PKI solutions such as Active Directory Certificate Services (AD CS); Hashicorp, Entrust, Sectigo, DigiCert, etc.\nExperience with multifactor solutions such as Microsoft Authenticator, Duo, etc.\nExperience implementing on-prem and cloud authentication solutions (AWS, Azure, and/or GCP)\nExperience with automation of authentication solutions and processes\nExperience deploying configurations leveraging CI/CD pipelines utilizing technologies like GitHub, Jenkins, GitHub Actions, Teraform, Ansible, etc\nDesired Skills\nUnderstanding of authentication attack techniques, threat actors, and exploitation methods and controls to mitigate.\nUnderstanding security standards and compliance requirements (NIST, ISO, PCI, HIPPA, Sox, etc.).\nUnderstanding of Full Stack Java development.\nSupervisory Responsibilities\nThis role does have supervisory responsibilities.\n#LI_NJ1\nSkills\nAccess Management, Access Management, Artificial Intelligence (AI), Artificial Intelligence Techniques, Authentication, Authentication Protocols, Automated Deployments, AWS Secrets Manager, Business Needs, Certificate Services, Computer Science, Customer Relationship Management (CRM), Design, Engineering Practices, Enterprise SSO, GitHub, GitHub Actions, Information Technology Management, Infrastructure as a Service (IaaS), Infrastructure As Code (IaC), Infrastructure Engineering, IT Security Operations, Just-in-Time (JIT) Manufacturing, Just in Time (JIT) Production, Kerberos {+ 30 more}Compensation\nCompensation offered for this role is 151,700.00 - 221,675.00 annually and is based on experience and qualifications.The candidate(s) offered this position will be required to submit to a background investigation.\nJoining our team isn’t just a job - it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger - a winning team making a meaningful impact.\nAllstate generally does not sponsor individuals for employment-based visas for this position.\nEffective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.\nFor jobs in San Francisco, please click “here ” for information regarding the San Francisco Fair Chance Ordinance.\nFor jobs in Los Angeles, please click “here ” for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.\nTo view the “EEO Know Your Rights” poster click “here ”. This poster provides information concerning the laws and procedures for filing complaints of violations of the laws with the Office of Federal Contract Compliance Programs.\nTo view the FMLA poster, click “ here ”. This poster summarizing the major provisions of the Family and Medical Leave Act (FMLA) and telling employees how to file a complaint.\nIt is the Company’s policy to employ the best qualified individuals available for all jobs. Therefore, any discriminatory action taken on account of an employee’s ancestry, age, color, disability, genetic information, gender, gender identity, gender expression, sexual and reproductive health decision, marital status, medical condition, military or veteran status, national origin, race (include traits historically associated with race, including, but not limited to, hair texture and protective hairstyles), religion (including religious dress), sex, or sexual orientation that adversely affects an employee's terms or conditions of employment is prohibited. This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.\nAllstate provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse. Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs.\nWhen working from home, you must have a dedicated, private workspace free from distractions, along with appropriate desk and seating. Reliable internet is required, with minimum speeds of 50 MB download and 5 MB upload.\nTo help create a more personal and engaging experience, we ask that you join with your camera on if your interview is virtual. Please also have a Valid Photo Identification available at the start of your interview. If you require any accommodations or have questions ahead of your interview please reach out to your recruiter.\nNote: Internal candidates are only asked to join on video; a Valid Photo Identification is not needed for the interview.","description_format":"text","description_chars":9026,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-10-27T23:28:19Z"},{"event":"close","at":"2026-11-05T04:05:17Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/allstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote","json_url":"https://alion.io/job/allstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote.json","meta":{"generated_at":"2026-11-05T23:31:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4836,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1921602},"rest":"https://alion.io/mcp/rest/get_company?id=1921602"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallstate-corporation-lead-engineer-authentication-engineering-sr-mgr-level-remote"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3366928}},{"tool":"search_jobs","arguments":{"company":"allstatecorporation.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3366928},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}