Lead Authentication Engineer

Allstate is seeking a Lead Authentication Engineer to own the strategy, design, and delivery of secure, scalable identity and access solutions across our financial and insurance platforms. In this senior manager–level role, you’ll architect authentication services using OAuth/OIDC, SSO, MFA, and modern security patterns while guiding a team of engineers. You’ll partner with security, product, and architecture to ensure compliance and resilience, mentor talent, and drive continuous improvement in a collaborative, flexible, and learning-focused culture dedicated to protecting millions of customers. Lead design and implementation of secure authentication and authorization services for Allstate’s digital platforms Architect identity solutions leveraging SSO, OAuth/OIDC, MFA, and related security standards Guide engineering team on best practices for security, reliability, and performance in auth services Collaborate with security, product, and architecture teams to align identity solutions with business needs Own roadmap and technical direction for authentication platforms and APIs Ensure compliance with regulatory and industry security standards within financial services Mentor engineers, conduct code reviews, and drive continuous improvement of engineering practices Monitor, troubleshoot, and optimize authentication services for scalability and uptime Evaluate and integrate third-party identity providers and tools as needed Document architectures, patterns, and operational runbooks for authentication systems Identity and Access Management (IAM) OAuth 2.0 and OpenID Connect (OIDC) Single Sign-On (SSO) and SAML Multi-Factor Authentication (MFA) API design and microservices architecture Cloud platforms (AWS, Azure, or GCP) Zero Trust and security best practices Programming in a modern language (e.g., Java, C#, or similar) CI/CD and DevSecOps practices Monitoring, logging, and incident response for auth services Medical Insurance Dental Insurance Vision Insurance Life Insurance 401k CISSP or equivalent security certification preferred Certified Cloud Security Professional (CCSP) a plus Relevant cloud provider certifications (AWS/Azure/GCP) preferred