Principal Identity Architect - Workforce & Customer

Allstate Insurance Company; Northern (KY); Hybrid; USD 199,000 - 274,000; Full time

Benefits offered by this job

Laptop provided

Monthly connectivity reimbursement for

Home office setup guidance

Job summary

Allstate Insurance Company seeks a Principal Engineer to lead identity strategy across workforce, customer, machine, and agentic identities. You will guide architecture, governance, and modernize identity platforms while partnering with engineering, product, and security teams to deliver secure experiences.

You will drive Zero Trust initiatives, implement MFA and fine-grained access controls, and mentor teams to achieve enterprise-wide identity excellence.

Qualifications

• 12+ years of experience designing and implementing enterprise IAM solutions.
• Working knowledge of Ping Identity, SailPoint, or similar IAM platforms.
• Strong knowledge of customer identity, workforce identity, federation, SSO, MFA, privileged access management, identity governance, and access certification.
• Experience designing and implementing Zero Trust identity architectures, including conditional access, risk-based authentication, fine-grained authorization, and least-privilege access controls.
• Experience supporting machine identities, workload identities, service accounts, certificates, secrets management, and cloud-native identity models.
• Familiarity with emerging AI and agentic identity concepts, governance models, and authorization frameworks.
• Proven ability to influence senior leaders, drive enterprise adoption, and communicate complex technical strategies across diverse stakeholder groups.

Responsibilities

• Define and drive the technical strategy and architecture for workforce, customer, machine, and agentic identity platforms across the enterprise.
• Champion identity as a business enabler by improving customer authentication experiences while maintaining strong security, governance, and compliance standards.
• Partner directly with engineers, architects, product teams, and security leaders to design, implement, and modernize identity solutions.
• Provide technical leadership for authentication, authorization, federation, identity governance, lifecycle management, privileged access management, and access certification capabilities.
• Lead the evaluation, design, and adoption of identity platforms and technologies, including Ping Identity, SailPoint, and emerging identity standards.
• Drive Zero Trust initiatives through implementation of MFA, risk-based authentication, fine-grained authorization, identity governance, and least-privilege access controls.
• Define identity strategies and governance models for machine identities, service accounts, workload identities, and emerging AI agents.
• Establish identity controls and lifecycle processes for autonomous and agentic systems, including delegated authority, ownership, governance, and privileged access management.
• Influence and drive enterprise adoption of identity modernization initiatives by clearly articulating business value, customer impact, and security outcomes.
• Collaborate with digital product teams to create seamless, secure, and scalable customer identity experiences that improve engagement, trust, and retention.
• Remain actively involved in architecture, troubleshooting, integration design, and implementation efforts while mentoring engineering teams and driving technical excellence.
• Establish engineering standards, reference architectures, and best practices that advance Allstate's long-term identity roadmap and Zero Trust strategy.

Skills

Access Management

Artificial Intelligence (AI)

Identity Access Management (IAM)

Identity Governance

Multi-Factor Authentication (MFA)

Ping Identity

SailPoint IdentityNow

Single Sign-On (SSO)

Stakeholder Influence

Zero Trust Architecture

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical field

Preferred: Relevant IAM or security certifications such as CISSP, CCSP, SailPoint, Ping Identity, Microsoft Security, or equivalent

Job description

Allstate Insurance Company seeks a Principal Engineer to lead identity strategy across workforce, customer, machine, and agentic identities. You will guide architecture, governance, and modernize identity platforms while partnering with engineering, product, and security teams to deliver secure experiences.

You will drive Zero Trust initiatives, implement MFA and fine-grained access controls, and mentor teams to achieve enterprise-wide identity excellence.