Information Security Expert
Allstate Canada Group
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
Allstate Canada Group seeks a Senior Ping Advanced Identity Cloud Engineer to lead design, implementation, and support of enterprise IAM solutions in a hybrid cloud environment. You will guide authentication, provisioning, and governance across workforce, customer, and partner identities, integrating SAML, OAuth, OIDC, and REST APIs.
You will mentor junior engineers, collaborate with security and application teams, and ensure compliance and scalability of IAM services.
Qualifications
- 7+ years of experience in Identity and Access Management (IAM).
- 5+ years hands‑on experience with Ping Advanced Identity Cloud (AIC) or ForgeRock Identity Cloud.
- Strong knowledge of identity federation and authentication standards (SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, JWT).
- Experience designing MFA and passwordless authentication solutions.
- Strong understanding of identity lifecycle management and user provisioning processes.
- REST APIs, JSON, JavaScript, Groovy scripting or similar.
- Experience integrating cloud and on‑premises applications with enterprise IAM platforms.
- Strong troubleshooting and root cause analysis skills.
- Excellent communication and stakeholder management abilities.
- Technical leadership and solution ownership.
Responsibilities
- Design, configure, implement, and support Ping Advanced Identity Cloud (AIC) solutions for workforce, customer, and partner identity use cases.
- Develop and maintain authentication, authorization, and identity lifecycle management workflows.
- Configure journeys, authentication trees, nodes, adaptive authentication, and access policies.
- Integrate applications using SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and REST APIs.
- Implement MFA, passwordless authentication, and risk‑based access controls.
- Design and support user provisioning and identity governance integrations.
- Develop custom scripts, APIs, and connectors to extend Ping AIC functionality.
- Troubleshoot complex identity and federation issues across enterprise environments.
- Collaborate with cybersecurity teams to ensure IAM meets security and regulatory requirements.
- Lead technical design reviews, architecture discussions, and deployment planning.
- Create and maintain technical documentation and deployment standards.
- Provide mentorship to junior IAM engineers and administrators.
- Support production environments and platform optimization initiatives.
Skills
Education
Job description
At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.
Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. Serving Canadians since 1953, Allstate strives to reassure both customers and employees with its “You’re in Good Hands®” promise and is proud to have been named a Best Employer in Canada for nine consecutive years.
Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism. To learn more, visit www.allstate.ca. For safety tips and advice, visit www.goodhandsadvice.ca. Through our Employee Value Proposition, we have worked hard to develop and nurture a culture where employees feel valued, experience personal growth, have career options and truly enjoy the work they do.
Remote
- Flexible Work Arrangements.
- Employee discounts (15% on auto and property insurance, plus many other products and services).
- Good Office program (receive up to $400 back after purchasing office equipment).
- Student Loan Payment Matching Program for Government Student loans.
- Comprehensive Retirement Savings Program with employer matched contributions.
- Annual Wellness allowance to support employees with improving health and wellbeing.
- Personal days.
- Tuition Reimbursement.
- Working within the community and giving back.
We are seeking an experienced Senior Ping Advanced Identity Cloud (AIC) Engineer to lead the design, implementation, integration, and support of enterprise identity and access management (IAM) solutions. The ideal candidate will possess deep expertise in Ping Identity technologies, particularly Ping Advanced Identity Cloud (formerly ForgeRock Identity Cloud), and will play a key role in delivering secure, scalable, and compliant identity services across the organization. This role requires strong technical leadership, hands‑on engineering experience, and the ability to collaborate with business stakeholders, security teams, application owners, and infrastructure teams. This position operates within a hybrid cloud environment supporting enterprise identity services and mission‑critical applications. The Senior Ping AIC Engineering will serve as a technical leader responsible for delivering secure, scalable, and resilient IAM solutions aligned with business and security objectives.
- Design, configure, implement, and support Ping Advanced Identity Cloud (AIC) solutions for workforce, customer, and partner identity use cases.
- Develop and maintain authentication, authorization, and identity lifecycle management workflows.
- Configure and customize journeys, authentication trees, nodes, adaptive authentication, and access policies.
- Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and REST APIs.
- Implement multi‑factor authentication (MFA), passwordless authentication, and risk‑based access controls.
- Design and support user provisioning and identity governance integrations.
- Develop custom scripts, APIs, and connectors to extend Ping AIC functionality.
- Troubleshoot complex identity and federation issues across enterprise environments.
- Collaborate with cybersecurity teams to ensure IAM solutions meet security, compliance, and regulatory requirements.
- Lead technical design reviews, architecture discussions, and implementation planning activities.
- Create and maintain technical documentation, operational procedures, and deployment standards.
- Provide mentorship and technical guidance to junior IAM engineers and administrators.
- Support production environments, incident response activities, and platform optimization initiatives.
- Related field or equivalent experience.
- 7+ years of experience in Identity and Access Management (IAM).
- 5+ years of hands‑on experience with Ping Advanced Identity Cloud (AIC) or ForgeRock Identity Cloud.
- Strong knowledge of identity federation and authentication standards including: SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) SCIM LDAP JWT.
- Experience designing and implementing MFA and passwordless authentication solutions.
- Strong understanding of identity lifecycle management and user provisioning processes.
- Experience with REST APIs, JSON, JavaScript, Groovy scripting, or similar technologies.
- Experience integrating cloud and on‑premises applications with enterprise IAM platforms.
- Strong troubleshooting and root cause analysis skills.
- Excellent communication and stakeholder management abilities.
- Technical leadership and solution ownership.
- Strategic thinking and architecture design.
- Cross‑functional collaboration.
- Mentoring and knowledge sharing.
- Strong written and verbal communication.
- Customer‑focused problem solving.
- Experience with additional Ping Identity products such as: PingFederate PingOne PingAccess PingDirectory PingAuthorize.
- Experience with cloud platforms including AWS, Azure, or Google Cloud Platform.
- Knowledge of Zero Trust security principles.
- Experience supporting large‑scale enterprise IAM environments.
- Relevant certifications in Ping Identity, ForgeRock, cloud platforms, or cybersecurity.
Expected compensation for this role ranges from $ 0.00 - 0.00 annually. Actual salary offered to successful candidates will vary based on their skills and experience.
Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.
Allstate helps protect nearly 16 million households with auto, home, life, and retirement products. We want every professional connected to Allstate to be committed to giving our customers the best and that means finding the best talent. We want you to be our next great addition.
Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs.
Allstate offers an environment that fosters innovative thinking where you’ll be able to explore your ideas and feel proud of the work you do.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
