Information Security Expert

Allstate Corporation; Canada; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible Work

Employee discounts

Office stipend

Student loan matching

Retirement savings

Wellness allowance

Personal days

Tuition reimbursement

Job summary

Allstate Canada Group is seeking an experienced Senior Ping Advanced Identity Cloud (AIC) Engineer to lead the design, implementation, and support of enterprise IAM solutions. You will work across business, security, and infrastructure teams in a hybrid cloud setting to deliver secure, scalable identity services.

The role requires strong technical leadership, hands-on engineering, and collaboration with stakeholders to meet security, regulatory, and business objectives.

Qualifications

• 7+ years of IAM experience.
• 5+ years with Ping Advanced Identity Cloud (AIC) or ForgeRock Identity Cloud.
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, JWT.
• Experience with REST APIs, JSON, JavaScript, Groovy scripting, or similar technologies.
• Experience integrating cloud and on-premises applications with IAM platforms.

Responsibilities

• Design, configure, implement, and support Ping Advanced Identity Cloud (AIC) solutions for workforce, customer, and partner identity use cases.
• Develop and maintain authentication, authorization, and identity lifecycle workflows.
• Configure authentication journeys, adaptive authentication, and access policies.
• Lead integration of applications using common protocols (SAML, OAuth, OIDC).
• Implement MFA and passwordless authentication and governance integrations.

Skills

IAM expertise

Ping AIC / ForgeRock

SAML/OAuth/OIDC/SCIM

REST APIs

Troubleshooting

Stakeholder communication

Mentoring

Education

Related field or equivalent experience

Tools

Ping AIC / ForgeRock

Job description

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Job Description Who is Allstate:

Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. Serving Canadians since 1953, Allstate strives to reassure both customers and employees with its “You’re in Good Hands®” promise and is proud to have been named a Best Employer in Canada for nine consecutive years. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism. To learn more, visit www.allstate.ca. For safety tips and advice, visit www.goodhandsadvice.ca. Through our Employee Value Proposition, we have worked hard to develop and nurture a culture where employees feel valued, experience personal growth, have career options and truly enjoy the work they do.

Role Designation: Remote

Benefits to joining Allstate

• Flexible Work Arrangements.
• Employee discounts (15% on auto and property insurance, plus many other products and services).
• Good Office program (receive up to $400 back after purchasing office equipment).
• Student Loan Payment Matching Program for Government Student loans.
• Comprehensive Retirement Savings Program with employer matched contributions.
• Annual Wellness allowance to support employees with improving health and wellbeing.
• Personal days.
• Tuition Reimbursement.
• Working within the community and giving back.

Job description

We are seeking an experienced Senior Ping Advanced Identity Cloud (AIC) Engineer to lead the design, implementation, integration, and support of enterprise identity and access management (IAM) solutions. The ideal candidate will possess deep expertise in Ping Identity technologies, particularly Ping Advanced Identity Cloud (formerly ForgeRock Identity Cloud), and will play a key role in delivering secure, scalable, and compliant identity services across the organization. This role requires strong technical leadership, hands‑on engineering experience, and the ability to collaborate with business stakeholders, security teams, application owners, and infrastructure teams. This position operates within a hybrid cloud environment supporting enterprise identity services and mission-critical applications. The Senior Ping AIC Engineering will serve as a technical leader responsible for delivering secure, scalable, and resilient IAM solutions aligned with business and security objectives.

Accountabilities

• Design, configure, implement, and support Ping Advanced Identity Cloud (AIC) solutions for workforce, customer, and partner identity use cases.
• Develop and maintain authentication, authorization, and identity lifecycle management workflows.
• Configure and customize journeys, authentication trees, nodes, adaptive authentication, and access policies.
• Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and REST APIs.
• Implement multi-factor authentication (MFA), passwordless authentication, and risk-based access controls.
• Design and support user provisioning and identity governance integrations.
• Develop custom scripts, APIs, and connectors to extend Ping AIC functionality.
• Troubleshoot complex identity and federation issues across enterprise environments.
• Collaborate with cybersecurity teams to ensure IAM solutions meet security, compliance, and regulatory requirements.
• Lead technical design reviews, architecture discussions, and implementation planning activities.
• Create and maintain technical documentation, operational procedures, and deployment standards.
• Provide mentorship and technical guidance to junior IAM engineers and administrators.
• Support production environments, incident response activities, and platform optimization initiatives.

Qualifications

• Related field or equivalent experience.
• 7+ years of experience in Identity and Access Management (IAM).
• 5+ years of hands‑on experience with Ping Advanced Identity Cloud (AIC) or ForgeRock Identity Cloud.
• Strong knowledge of identity federation and authentication standards including: SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) SCIM LDAP JWT Experience designing and implementing MFA and passwordless authentication solutions.
• Strong understanding of identity lifecycle management and user provisioning processes.
• Experience with REST APIs, JSON, JavaScript, Groovy scripting, or similar technologies.
• Experience integrating cloud and on‑premises applications with enterprise IAM platforms.
• Strong troubleshooting and root cause analysis skills.
• Excellent communication and stakeholder management abilities.
• Technical leadership and solution ownership Strategic thinking and architecture design Cross‑functional collaboration Mentoring and knowledge sharing Strong written and verbal communication Customer‑focused problem solving

Bonus Qualifications

• Experience with additional Ping Identity products such as: PingFederate PingOne PingAccess PingDirectory PingAuthorize.
• Experience with cloud platforms including AWS, Azure, or Google Cloud Platform.
• Knowledge of Zero Trust security principles.
• Experience supporting large‑scale enterprise IAM environments.
• Relevant certifications in Ping Identity, ForgeRock, cloud platforms, or cybersecurity.

Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs.

LI#MK1

Skills Access Management, Application Programming Interface (API), Cloud Computing, Cloud Platform, Cross-Team Collaboration, Cybersecurity, Identity Access Management (IAM), Identity Governance, Information Security, Problem Resolution, Technical Knowledge

Compensation Expected compensation for this role ranges from $ 0.00 - 0.00 annually.

Actual salary offered to successful candidates will vary based on their skills and experience.

Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.

Allstate Canada Group uses AI technology tools to assist in screening, selecting, assessing, and scheduling interviews with candidates as part of the recruitment process. This job posting is for a current open role within the organization. At Allstate, we work hard to help people live a good life every day. Allstaters are dedicated to serving clients, customers, and communities, which allows employees to find meaning and value in their work. Allstate offers an environment that fosters innovative thinking where you’ll be able to explore your ideas and feel proud of the work you do. Allstate helps protect nearly 16 million households with auto, home, life, and retirement products. We want every professional connected to Allstate to be committed to giving our customers the best and that means finding the best talent. We want you to be our next great addition.