{"id":1205871,"url":"https://alion.io/job/allstate-corporation-lead-engineering-authentication-engineering-senior-manager","title":"Lead Engineering, Authentication Engineering (Senior Manager)","company":{"id":1921602,"name":"Allstate Corporation","domain":"allstatecorporation.com","url":"https://alion.io/company/allstatecorporation","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":31,"ghost_share":0,"stale_share":0.806,"repost_share":0,"time_to_fill_p50_days":10,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Early Careers","role_family":"Early Careers","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"HIPAA","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-18T05:21:18Z","board_verified":true,"closed_at":null,"days_open":54,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":54},"description":"At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.\nJob Description\nWho is Allstate:\nAllstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. Serving Canadians since 1953, Allstate strives to reassure both customers and employees with its “You’re in Good Hands®” promise and is proud to have been named a Best Employer in Canada for nine consecutive years. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism. To learn more, visit www.allstate.ca. For safety tips and advice, visit www.goodhandsadvice.ca.\nThrough our Employee Value Proposition, we have worked hard to develop and nurture a culture where employees feel valued, experience personal growth, have career options and truly enjoy the work they do.\nRole Designation: Remote\nBenefits to joining Allstate\nFlexible Work Arrangements. \nEmployee discounts (15% on auto and property insurance, plus many other products and services). \nGood Office program (receive up to $400 back after purchasing office equipment). \nStudent Loan Payment Matching Program for Government Student loans. \nComprehensive Retirement Savings Program with employer matched contributions. \nAnnual Wellness allowance to support employees with improving health and wellbeing. \nPersonal days. \nTuition Reimbursement. \nWorking within the community and giving back. \nJob description:\nWe are seeking a highly technical and innovative Lead Engineering, Authentication Engineering (Senior Manager) to lead the design, implementation, and advancement of enterprise authentication platforms. Multiple Managing Engineering’s for authentication teams will report to this role. This role will provide technical leadership for authentication solutions, including directory infrastructure, multi-factor authentication (MFA), PKI, privileged access management and vaulting solutions and an in-house developed application for password and MFA management.\nThe successful candidate will partner closely with Product Management, Cybersecurity, Infrastructure Engineering, Application Teams, and Operations to deliver secure, scalable, and resilient authentication capabilities that align with strategic directions including AI enablement, Zero Trust, Infrastructure as Code, and automation.\nAccountabilities:\nPartner with Authentication Lead Product Manager for creation of strategy, roadmaps, prioritization, and implementation of solutions.\nLead the strategy, architecture, and engineering of enterprise authentication solutions, ensuring they meet business needs while delivering a secure, seamless user experience.\n Design, implement, and modernize authentication solutions, including MFA,, PKI, SSO, privileged access management, vaulting, and cloud-native authentication platforms to enable Zero Trust capabilities including passwordless, phishing-resistant authentication, Just-In-Time (JIT) and Just-Enough (JEA) access.\nDrive increased automation and Infrastructure as Code including test driven development practices for validation and control testing\nLead large-scale authentication migrations and technology transformations, while continuously improving platforms to reduce user friction and increase adoption.\nPartner with security, infrastructure, cloud, application, and AI teams to deliver scalable, resilient authentication services and support security integration into application d automation, AI workflows, agentic AI capabilities.\nProvide technical leadership and people development by coaching Managing Engineerings, leading technical product design reviews, and providing direction for engineering best practices.\nInfluence clients and partners to prioritize for enterprise benefit and risk reduction and assist in driving the adoption of technology solutions that leverage existing patterns, practices, and reference architectures. \nStrengthen the organization’s security posture by implementing and enhancing controls to address gaps and vulnerabilities identified through audits, assessments, red team, penetration testing, vulnerability scanning, and proactive threat modeling.\ngaps identified through\nOwn the reliability, resiliency, and operational excellence of authentication services by defining and achieving SLOs, improving service availability and performance, instrumenting and enhancing observability, and leading incident response efforts to reduce MTTR.\nEvaluate emerging technologies and industry trends, establish engineering standards and best practices, and provide technical leadership across authentication domains.\nQualifications:.\nExperience\n5-10+ years of Information Technology or Engineering experience with authentication engineering accountabilities.\n3+ years management experience.\nExperience leading enterprise large-scale projects.\nTechnical Skills\nStrong technical expertise and enterprise experience with majority of the following:\nStrong Expertise with Active Directory and Entra ID\nExperience with PKI solutions such as Active Directory Certificate Services (AD CS); Hashicorp, Entrust, Sectigo, DigiCert, etc.\nExperience with multifactor solutions such as Microsoft Authenticator, Duo, etc.\nExperience implementing on-prem and cloud authentication solutions (AWS, Azure, and/or GCP)\nExperience with automation of authentication solutions and processes\nExperience deploying configurations leveraging CI/CD pipelines utilizing technologies like GitHub, Jenkins, GitHub Actions, Teraform, Ansible, etc\nBonus Qualifications:\nExperience with Privileged Access Management and Vaulting solutions (CyberArk, Hashicorp, Azure Key Vault, AWS Secrets Manager, GCP Secrets Manager, etc.)\nExperience with hardware tokens/smart cards for TOTP, FIDO2, PIV (Duo, Thales, Yubikey, etc.)\nStrong knowledge of authentication protocols such as SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, certificate based authentication, etc.\nUnderstanding of authentication attack techniques, threat actors, and exploitation methods and controls to mitigate.\nScripting experience (PowerShell, Python, etc.)\nUnderstanding of Full Stack Java development.\nUnderstanding security standards and compliance requirements (NIST, ISO, PCI, HIPPA, Sox, etc.).\nIf you are applying for a position open to candidates across Canada, unless otherwise indicated, strong English communication skills are required, as the role involves regular interaction with clients, advisors, or employees across the country.\nAllstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs.\n#LI_NJ1\nÀ propos d’Allstate :\nAllstate du Canada, compagnie d’assurance est un chef de file dans le domaine des assurances automobile et habitation; elle offre à ses clients des produits et services de prévention et de protection qui conviennent à toutes les étapes de la vie. Au service des Canadiens depuis 1953, l’entreprise met tout en œuvre pour que non seulement ses clients, mais aussi ses employés soient en bonnes mainsMD, comme en fait foi sa présence au palmarès des Employeurs de choix au Canada pendant neuf années de suite. Allstate du Canada tient à contribuer au mieux-être des communautés dans lesquelles elle exerce ses activités au moyen de partenariats avec des organismes caritatifs et de programmes misant sur la générosité de ses employés. Pour en savoir plus, visitez le www.allstate.ca. Pour connaître nos conseils en matière de sécurité, consultez le blogue Allstate Assurance au blogue.allstate.ca.\nÀ Allstate, nous avons conscience que la qualité de nos produits découle directement du niveau de satisfaction du personnel à l’égard de l’entreprise. C’est pourquoi nous misons sur le maintien d’une culture où les employés se sentent valorisés et où ils peuvent poursuivre une carrière passionnante. Notre proposition de valeur aux employés permet ainsi de s’épanouir de façon unique.\nDésignation du rôle : télétravail\nLes avantages offerts par Allstate\nLa flexibilité des modalités de travail;\nDes rabais d’employé (15 % sur les assurances automobile et habitation, ainsi que des rabais sur de nombreux autres produits et services);\nLe programme Bureau en bonnes mains (jusqu’à 400 $ sont octroyés pour se procurer de l’équipement de bureau nécessaire à domicile);\nUn programme de paiement de contrepartie pour le remboursement des prêts étudiants aux programmes gouvernementaux;\nUn régime d’épargne-retraite complet prévoyant des cotisations de contrepartie de l’employeur;\nUne allocation annuelle couvrant des dépenses effectuées pour améliorer sa santé et son bien-être;\nUn Jour de réflexion personnelle;\nLe remboursement de droits de scolarité;\nUne implication dans la vie communautaire.\nDescription du poste :\nNous sommes à la recherche d’une personne hautement qualifiée sur le plan technique et novatrice pour occuper le poste d’ ingénieur·e en chef, authentification (gestionnaire principal\ne), et diriger la conception, la mise en œuvre et l’évolution des plateformes d’authentification de l’entreprise. Plusieurs gestionnaires en ingénierie responsables d’équipes d’authentification relèveront de cette personne. Celle-ci assurera le leadership technique des solutions d’authentification, notamment l’infrastructure d’annuaire, l’authentification multifacteur (AMF), l’infrastructure à clés publiques (ICP), la gestion des accès privilégiés, les solutions de coffres-forts ainsi qu’une application développée à l’interne pour la gestion des mots de passe et de l’AMF.\nLa personne retenue collaborera étroitement avec les équipes de gestion de produits, de cybersécurité, d’ingénierie des infrastructures, d’applications et d’exploitation afin d’offrir des capacités d’authentification sécuritaires, évolutives et résilientes, qui cadrent avec les orientations stratégiques, notamment l’intégration de l’intelligence artificielle (IA), le modèle de sécurité Zéro confiance, l’infrastructure en tant que code et l’automatisation.\nResponsabilités :\nCollaborer avec la personne responsable principale de la gestion de produits d’authentification afin d’élaborer la stratégie et les feuilles de route, d’établir les priorités et de mettre en œuvre les solutions.\nDiriger la stratégie, l’architecture et l’ingénierie des solutions d’authentification de l’entreprise afin qu’elles répondent aux besoins opérationnels tout en offrant une expérience utilisateur sécuritaire et fluide.\n Concevoir, mettre en œuvre et moderniser les solutions d’authentification, notamment l’AMF, l’ICP, l’authentification unique (SSO), la gestion des accès privilégiés, les coffres-forts et les plateformes d’authentification infonuagiques natives, afin de soutenir les capacités Zéro confiance, dont l’authentification sans mot de passe et résistante à l’hameçonnage ainsi que les accès juste-à-temps (JIT) et juste suffisants (JEA).\nAccroître l’automatisation et l’utilisation de l’infrastructure en tant que code, notamment en appliquant des pratiques de développement piloté par les tests à la validation et à la mise à l’essai des contrôles.\nDiriger des migrations de systèmes d’authentification et des transformations technologiques à grande échelle, tout en améliorant continuellement les plateformes pour simplifier l’expérience utilisateur et favoriser leur adoption.\nCollaborer avec les équipes de sécurité, d’infrastructure, d’infonuagique, d’applications et d’IA afin d’offrir des services d’authentification évolutifs et résilients,...","description_format":"text","description_chars":18344,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":false},{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Nonprofits & Foundations"],"lifecycle":[{"event":"open","at":"2026-09-24T23:46:40Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.188,"p_room":0.28,"age_days":53,"expected_fill_days":10,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/allstate-corporation-lead-engineering-authentication-engineering-senior-manager","json_url":"https://alion.io/job/allstate-corporation-lead-engineering-authentication-engineering-senior-manager.json","meta":{"generated_at":"2026-10-18T14:03:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20844,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1921602},"rest":"https://alion.io/mcp/rest/get_company?id=1921602"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallstate-corporation-lead-engineering-authentication-engineering-senior-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallstate-corporation-lead-engineering-authentication-engineering-senior-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallstate-corporation-lead-engineering-authentication-engineering-senior-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allstate-corporation-lead-engineering-authentication-engineering-senior-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallstate-corporation-lead-engineering-authentication-engineering-senior-manager"}]}