Lead Engineer, Authentication Engineering

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Oversee the design, implementation, and enhancement of enterprise authentication platforms.

• Offer technical leadership for directory infrastructure, MFA, PKI, privileged access management, vaulting solutions, and password/MFA management applications.

• Collaborate with the Authentication Lead Product Manager on strategy, roadmaps, prioritization, and solution execution.

• Drive authentication strategy, architecture, and engineering to fulfill business requirements while ensuring a secure and seamless user experience.

• Design, implement, and modernize MFA, PKI, SSO, privileged access management, vaulting, and cloud-native authentication platforms.

• Facilitate Zero Trust capabilities, including passwordless, phishing-resistant authentication, JIT, and JEA access.

• Promote automation, Infrastructure as Code, and test-driven development practices for validation and control testing.

• Manage large-scale authentication migrations and technology transformations.

• Collaborate with security, infrastructure, cloud, application, and AI teams to provide scalable and resilient authentication services.

• Assist in integrating security into application automation, AI workflows, and agentic AI capabilities.

• Mentor Managing Engineers, providing technical leadership and fostering people development.

• Conduct technical product design reviews and guide engineering best practices.

• Influence clients and partners to prioritize enterprise benefits and risk mitigation.

• Promote the adoption of technology solutions using established patterns, practices, and reference architectures.

• Implement and enhance security controls to address audit, assessment, red-team, penetration testing, vulnerability scanning, and threat modeling findings.

• Ensure the reliability, resiliency, and operational excellence of authentication services.

• Define and meet SLOs, enhance availability and performance, improve observability, and lead incident response to minimize MTTR.

• Assess emerging technologies and industry trends to establish engineering standards and best practices.

• Provide technical leadership across authentication domains.

• Oversee and manage multiple Managing Engineers.

⛳️ Requirements

• 10+ years of experience in Information Technology or Engineering with a focus on authentication, identity, or security engineering responsibilities.

• Proven experience leading large-scale enterprise projects.

• Deep expertise in Active Directory and Entra ID.

• Familiarity with PKI solutions such as Active Directory Certificate Services (AD CS), Hashicorp, Entrust, Sectigo, or DigiCert.

• Experience with multifactor solutions such as Microsoft Authenticator or Duo.

• Proven background in implementing on-premises and cloud authentication solutions using AWS, Azure, and/or GCP.

• Experience in automating authentication solutions and processes.

• Proficient in deploying configurations through CI/CD pipelines using technologies like GitHub, Jenkins, GitHub Actions, Terraform, Ansible, or similar tools.

• Understanding of authentication attack techniques, threat actors, exploitation methods, and mitigation controls.

• Knowledge of security standards and compliance requirements, including NIST, ISO, PCI, HIPAA, and SOX.

• Familiarity with Full Stack Java development.

• Background investigation required.

• Must have reliable internet with a minimum of 50 MB download and 5 MB upload speeds.

• Must have a dedicated, private home workspace that is free from distractions, equipped with appropriate desk and seating.

• Allstate generally does not sponsor individuals for employment-based visas for this position.

🏝️ Benefits

• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.

• Monthly connectivity reimbursement to help offset internet costs.

• Remote work arrangement.

• Opportunity for professional development and career advancement.

• Meaningful work supporting customers, clients, and communities.