Senior IAM Engineer: Secure Access & SSO Lead

Allstate; United States; Remote; USD 98,000 - 168,000; Full time

Job summary

Allstate is seeking a Senior Identity & Access Management (IAM) Engineer to lead and enhance enterprise IAM capabilities across critical applications. The role focuses on vendor platforms, SSO, and security objectives, partnering with security, infrastructure, and business teams to deliver secure access management solutions.

The candidate will mentor team members, design functional and technical solutions, and help define platform direction while maintaining production readiness and regulatory

Qualifications

• 5+ years of experience implementing, configuring, administering, or supporting enterprise Identity and Access Management (IAM) solutions.
• Hands-on experience with one or more enterprise web access management or IAM platforms such as IBM Verify Identity Access, IBM Verify Access, IBM Security Access Manager, IBM Verify Access Appliance or related versions, Okta, ForgeRock, PingOne Advanced Identity Cloud, Ping Access, PingFederate, PingAM.
• Experience configuring or developing within vendor software to support access management, application authentication, authorization, and secure application access.
• Experience implementing and supporting single sign-on (SSO), federation, and access management solutions for enterprise applications.
• Experience writing automation scripts to complete the integration mapping automation using scripting languages such as JavaScript, Python, Groovy, YAML or PowerShell.
• Knowledge of SAML, OAuth, OpenID Connect (OIDC), and federation concepts.
• Experience gathering complex business requirements and translating them into functional and technical designs.
• Experience supporting module testing, integration testing, issue resolution, and production troubleshooting for enterprise applications or platforms.
• Ability to lead technical discussions, organize requirements or feature review sessions, and document resulting decisions.
• Experience working with vendor support processes, product documentation, defect resolution procedures, or developer support groups.
• Ability to manage multiple priorities, identify blockers, drive issue resolution, and support delivery of assigned product features.
• Strong analytical, troubleshooting, problem-solving, communication, and stakeholder partnership skills.
• Ability to mentor, coach, or train team members and share knowledge across technical and business teams.
• Equivalent combinations of technical training, certifications, and relevant work experience will be considered.

Responsibilities

• Design, configure, enhance, and support enterprise Identity and Access Management solutions, focusing on vended platforms.
• Develop technical and functional designs addressing complex business requirements, access needs, and security objectives.
• Configure, develop within, and maintain IAM platforms supporting authentication, authorization, SSO, federation, and access control capabilities.
• Collaborate with business stakeholders, security, infrastructure, application owners, and vendor support teams to deliver secure access management solutions.
• Contribute to product planning by creating, refining, and guiding user stories for complex features, including coaching team members.
• Facilitate feature review sessions for complex issues and document key decisions to ensure alignment.
• Create functional designs using moderate technical skills for complex processes and integrations.
• Plan, execute, and review module, integration, and system testing for features and stories.
• Manage issues, blockers, defects, and risks through resolution for features and stories.
• Review and validate vendor release features, assess impact, and identify platform improvements.
• Use vendor processes, documentation, and support groups to troubleshoot and influence product direction.
• Evaluate proposed vendor software and enhancements in line with strategy and roadmaps.
• Provide knowledge and support for resolving technology issues across multiple business areas.
• Serve as SME for IAM processes, platforms, and integrations; provide training and knowledge sharing.

Skills

IAM

SSO

Federation

Identity platforms

Vendor management

Troubleshooting

Documentation

Mentoring

Tools

ISAM

IBM Verify Access

PingFederate

PingAccess

PAIC

Job description

Allstate is seeking a Senior Identity & Access Management (IAM) Engineer to lead and enhance enterprise IAM capabilities across critical applications. The role focuses on vendor platforms, SSO, and security objectives, partnering with security, infrastructure, and business teams to deliver secure access management solutions.

The candidate will mentor team members, design functional and technical solutions, and help define platform direction while maintaining production readiness and regulatory