Lead Consultant, Systems Engineer – Identity & Authentication

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Lead and drive research, design, planning, selection, engineering, implementation, maintenance, testing, debugging, performance analysis, and documentation of network hardware and software technology components.

• Analyze, integrate, and address moderately to highly complex incidents and issues impacting production systems and various applications.

• Identify and propose significant changes to technology components aimed at preventing incidents.

• Conduct root cause analysis and escalate high-complexity incidents and issues to enhance the resilience of applications, hardware, and software.

• Ensure the seamless integration of technical hardware and software plans with other components.

• Support production service requests, carry out routine administration, and assist with moderately complex network hardware and software infrastructure.

• Develop and maintain tools for the upkeep, modification, and monitoring of hardware and software technology components.

• Implement technology components by assessing current systems and infrastructure, utilizing technical tools and utilities, and executing product customizations.

• Collaborate with fellow Engineers to foster consensus, address infrastructure interactions and data conversion impacts, and fulfill business function and performance needs.

• Assist in defining and updating elements within the configuration management plan.

⛳️ Requirements

• Legal authorization to work in the UK for employment at Allstate.

• Allstate will not provide sponsorship for this position.

• A minimum of 4 years of experience in designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions within complex hybrid environments.

• At least 1 year of experience leading and mentoring a team within Identity and Authentication.

• Advanced expertise in Active Directory Domain Services (ADDS), Active Directory Federation Services (ADFS), Microsoft Entra ID, Active Directory Certificate Services (ADCS), and Hybrid Identity.

• Strong skills in PowerShell scripting, automation, APIs, Infrastructure as Code (IaC), and contemporary engineering practices.

• Familiarity with LDAP, Kerberos, SAML, OAuth, OpenID Connect (OIDC), WS-Federation, and certificate-based authentication.

• Experience in administering and supporting Group Policy (GPO), Domain Name System (DNS), Windows Server Update Services (WSUS), and System Center Operations Manager (SCOM) in enterprise settings.

• This position does not include supervisory responsibilities.

• Desirable: experience with privileged access management, certificate lifecycle management, or cloud identity platforms.

• Desirable: experience with GitHub, CI/CD pipelines, Infrastructure as Code, and automation frameworks.

• Desirable: familiarity with AI-assisted development, intelligent automation, operational analytics, or emerging AI technologies.

• Desirable certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Certified: Azure Administrator Associate (AZ-104), Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft Certified: Cybersecurity Architect Expert (SC-100).

🏝️ Benefits

• Competitive annual salary.

• Corporate bonus scheme.

• Pension scheme.

• Annual performance-related pay reviews.

• Life assurance and income protection.

• Flexible working options.

• Hybrid working environment.

• Private medical and dental insurance.

• Access to an employee assistance program.

• Discounted gym membership.

• Two paid volunteering days each year.

• Cycle to work scheme.

• Continuous Learning Hub.

• Skills development and professional advancement through tailored learning paths, certifications, and mentoring opportunities.