Senior Identity & Access Management (IAM) Engineer

Allstate

Confirmed live today High trust

Remote

Quick summary

Work type: Remote
Location: IL
Salary: $98,100–$167,850 / yr
Employment: Full-time
Posted: 61 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $193k

This role $133k

$82k $245k

below market most similar roles pay here above market

This role pays less than 92% of similar roles. Most pay $156,312–$229,100 — the blue band above. At the midpoint, this role pays about $133k versus about $193k for comparable roles.

Based on 240 similar postings.

Employer

About Allstate

The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.

Allstate currently has 52 open roles on FindRole.

Listed pay typically runs $100,000–$170,500 across 51 roles with salary data.

Most-posted roles

View all roles at Allstate

At a glance

TL;DR · Senior Identity & Access Management (IAM) Engineer

Role Posting Log in to save

The Senior Identity & Access Management (IAM) Engineer joins the team to support and enhance enterprise access management platforms securing critical applications and digital services. This role involves designing, configuring, and implementing commercial IAM solutions while partnering with business and technology teams to deliver scalable access capabilities. Key responsibilities include developing technical designs for authentication, authorization, single sign-on, and federation, as well as managing vendor relationships, troubleshooting defects, and mentoring team members. Candidates must possess experience with platforms such as IBM Verify Identity Access, PingFederate, or Okta. Required skills include proficiency in SAML, OAuth, and OpenID Connect protocols, along with automation scripting in JavaScript, Python, Groovy, YAML, or PowerShell. The role solves complex business requirements by ensuring secure, reliable access across diverse enterprise application processes.

Skills

Identity and Access Management (IAM) SAML OAuth OpenID Connect (OIDC) Python JavaScript Groovy YAML PowerShell IBM Verify Identity Access IBM Verify Access IBM Security Access Manager (ISAM) PingOne Advanced Identity Cloud (PAIC) Ping Access PingFederate PingAM Okta ForgeRock Active Directory LDAP SSO Agile Scrum MFA IGA PAM

What you'll do

Design, configure, and maintain enterprise IAM platforms to support authentication, authorization, SSO, and federation.
Develop technical and functional designs that translate complex business requirements into secure access management solutions.
Integrate applications with IAM platforms and manage vendor software releases to improve platform reliability.
Troubleshoot technical issues, manage defects, and resolve implementation risks for assigned product features.
Create and maintain technical documentation, process procedures, and implementation guidance for the organization.
Evaluate vendor software products and roadmaps to align with corporate security standards and strategic goals.
Mentor team members and provide training to strengthen internal knowledge of access management processes.

What we're looking for

5 or more years of experience implementing, configuring, administering, or supporting enterprise Identity and Access Management (IAM) solutions.
Hands-on experience with enterprise web access management platforms such as IBM Verify, PingOne, Okta, ForgeRock, or similar tools.
Experience configuring vendor software to support authentication, authorization, single sign-on (SSO), and federation.
Experience writing automation scripts using languages such as JavaScript, Python, Groovy, YAML, or PowerShell.
Knowledge of identity standards and protocols including SAML, OAuth, OpenID Connect (OIDC), and federation concepts.
Experience gathering business requirements and translating them into functional and technical designs.
Experience supporting module testing, integration testing, and production troubleshooting for enterprise applications.
Experience supporting large enterprise IAM environments, cloud-based identity platforms, or hybrid identity environments (preferred).

Similar roles

Principal Identity & Access Management (IAM) Engineer

Early Warning Services

Chicago, IL 15 days ago $184,000–$230,000

Identity and Access Management (IAM) Identity Governance Administration (IGA) Active Directory Entra Okta Saviynt SailPoint Infrastructure as Code Network Protocols Least Privileged Access Change Management Security Audits Vulnerability Management Microsoft Office PCI CIAM CompTIA Security+ CISSP CISM CISA

10+ yrs exp Hybrid

Save

Identity and Access Management Engineer

Booz Allen Hamilton

Honolulu, HI 88 days ago

IAM Active Directory LDAP PingIdentity SailPoint Microsoft Identity Manager Saviynt One Identity Splunk ELK Stack PKI PIV IGA PAM Zero Trust ICAM SIEM Security Architecture Directory Services

Save

Senior Identity & Access Management Engineer

Early Warning Services

Chicago, IL 19 days ago $108,000–$149,000

Saviynt Enterprise Identity Cloud Active Directory Entra ID Okta Workday ServiceNow SAP AWS Python PowerShell SQL REST SOAP JSON XML Groovy Postman SAML OIDC OAuth RBAC ABAC Agile SAFe

5+ yrs exp Hybrid

Save

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +1 18 days ago

Identity and Access Management (IAM) SailPoint Okta Microsoft Entra ID PingIdentity CyberArk Microsoft Identity Manager (MIM) SAML OIDC OAuth RBAC ABAC Directory Services Federated Identity Management

5+ yrs exp

Save

Identity and Access Management Specialist, Senior

Booz Allen Hamilton

Washington, DC +2 54 days ago

5+ yrs exp

Save

ICAM Identity Provider (IdP) Engineer, Enterprise Authentication Services

General Dynamics

Fort Meade, MD 72 days ago $140,250–$189,750

SAML OAuth 2.0 OpenID Connect (OIDC) WS-Federation Identity and Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) PKI LDAP Active Directory Microsoft Entra ID PingFederate PingAccess Okta Keycloak PowerShell Docker Kubernetes Zero Trust Architecture

3+ yrs exp

Save