Lead Engineer, Authentication Engineering

Allstate

Confirmed live today High trust

Remote

Quick summary

Work type: Remote
Location: IL
Salary: $151,700–$221,675 / yr
Employment: Full-time
Posted: 3 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $189k

This role $187k

$132k $242k

below market most similar roles pay here above market

This role pays more than 50% of similar roles. Most pay $160,000–$217,500 — the blue band above. At the midpoint, this role pays about $187k versus about $189k for comparable roles.

Based on 240 similar postings.

Employer

About Allstate

The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.

Allstate currently has 53 open roles on FindRole.

Listed pay typically runs $100,000–$170,500 across 52 roles with salary data.

Most-posted roles

View all roles at Allstate

At a glance

TL;DR · Lead Engineer, Authentication Engineering

Role Posting Log in to save

JOB TITLE: Lead Engineer, Authentication Engineering, (Sr Mgr Level) - Remote The Lead Engineer, Authentication Engineering, (Sr Mgr Level) provides technical leadership for the authentication engineering team, overseeing multiple Managing Engineers. This role involves designing, implementing, and modernizing enterprise authentication platforms, including directory infrastructure, multi-factor authentication, PKI, privileged access management, and vaulting solutions. The engineer will build secure, scalable capabilities such as passwordless and phishing-resistant authentication while driving automation through Infrastructure as Code and test-driven development. Key technologies include Active Directory, Entra ID, AWS, Azure, GCP, Hashicorp, and GitHub Actions. The role addresses the business problem of securing enterprise access and reducing user friction. Responsibilities include managing large-scale migrations, defining SLOs for reliability, and integrating security into AI workflows and agentic AI capabilities to strengthen the overall security posture.

Skills

Active Directory Entra ID PKI MFA SSO Zero Trust Infrastructure as Code CI/CD Ansible GitHub GitHub Actions Jenkins AWS Azure GCP Java Kerberos

What you'll do

Lead the design, architecture, and engineering of enterprise authentication platforms including MFA, PKI, and SSO.
Develop and implement Zero Trust capabilities such as passwordless, phishing-resistant, and Just-In-Time access.
Drive automation and Infrastructure as Code (IaC) practices using CI/CD pipelines for deployment and testing.
Manage large-scale authentication migrations and technology transformations to reduce user friction.
Provide technical leadership and coaching to Managing Engineers while overseeing technical product design reviews.
Ensure the reliability and performance of authentication services by defining SLOs and leading incident response.
Strengthen security posture by addressing vulnerabilities identified through audits, red team testing, and threat modeling.
Evaluate emerging technologies and industry trends to establish engineering standards across all authentication domains.

What we're looking for

10+ years of experience in information technology or engineering with authentication, identity, or security engineering responsibilities.
Experience leading enterprise large-scale projects.
Expertise in Active Directory and Entra ID.
Experience with PKI solutions such as Active Directory Certificate Services, Hashicorp, Entrust, Sectigo, or DigiCert.
Experience with multi-factor authentication solutions like Microsoft Authenticator or Duo.
Experience implementing on-premises and cloud authentication solutions across AWS, Azure, and/or GCP.
Experience with automation of authentication solutions and deploying configurations using CI/CD pipelines (GitHub, Jenkins, Terraform, Ansible).
3+ years of management experience (preferred).

Similar roles

Lead Infrastructure Engineer, IAM

T. Rowe Price

Owings Mills, MD 37 days ago $122,000–$209,000

Microsoft Entra ID Active Directory AWS IAM Identity Center Zero Trust PAM PKI SAML OAuth LDAP ADFS MIM Kerberos DNS Certificate Services MFA Conditional Access Federation

8+ yrs exp Hybrid

Save

Principal Security Lead Engineer

Amd

Santa Clara, CA 46 days ago $205,600–$308,400

Security Architecture Firmware SoC RTL Computer Architecture Pre-silicon Post-silicon System-level Modeling PSIRT CPU Security Graphics Architecture AI Tools Bring-up

Save

Senior Lead Security Engineer

JPMorgan Chase

Wilmington, DE 30 days ago

Security Engineering Threat Modeling Penetration Testing Cloud Native Artificial Intelligence Machine Learning Risk Assessment Agile

5+ yrs exp

Save

Senior Lead Security Engineer

JPMorgan Chase

Plano, TX 2 days ago

Security Engineering Cryptography Cloud Security Identity and Access Management Confidential Computing Artificial Intelligence Machine Learning Threat Modeling Risk Assessment Penetration Testing Zero-Trust Architecture Software Development Lifecycle Security Architecture

5+ yrs exp

Save

Senior Authentication Services Engineer

Maplewood, MN +1 102 days ago

Microsoft Entra ID Active Directory SAML OIDC OAuth 2.0 FIDO2 Windows Hello for Business PowerShell Microsoft Graph API AWS IAM Azure AD B2B/B2C CyberArk SIEM Zero Trust IAM PAM IGA Kerberos NTLM

6+ yrs exp

Save

Distinguished Engineer, AI Security Systems

CrowdStrike

Remote (WA) 7 days ago $235,000–$350,000

Large Language Models Agentic Architectures Python C C++ Rust Go Distributed Systems GPU Inference vLLM TensorRT-LLM Triton SGLang Reinforcement Learning Quantization Distillation Cybersecurity Threat Hunting Malware Analysis Vulnerability Research

10+ yrs exp Remote

Save