Senior Identity & Access Management (IAM) Engineer

Allstate

Confirmed live 2 days ago High trust
Remote

Quick summary

Work type
Remote
Location
IL
Salary
$98,100–$167,850 / yr
Posted
15 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $183k
This role $133k
$84k most similar roles pay here $230k

This role pays less than 90% of similar roles. Most pay $150,297–$216,000 — the shaded band above. At the midpoint, this role pays about $133k versus about $183k for comparable roles.

Based on 240 similar postings.

Employer

About Allstate

The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.

Allstate currently has 36 open roles on FindRole.

Listed pay typically runs $100,000–$170,500 across 36 roles with salary data.

Most-posted roles

View all roles at Allstate

At a glance

TL;DR · Senior Identity & Access Management (IAM) Engineer

Senior Identity & Access Management (IAM) Engineer The Senior Identity & Access Management (IAM) Engineer joins the team to support and enhance enterprise access management platforms securing critical applications and digital services. This role involves designing, configuring, implementing, and supporting commercial IAM solutions while collaborating with business and technology teams to deliver scalable capabilities. Day-to-day responsibilities include developing technical designs for authentication, authorization, single sign-on (SSO), and federation, as well as managing vendor relations, troubleshooting issues, and mentoring team members. The role requires expertise in platforms such as IBM Verify Identity Access, IBM Security Access Manager, PingOne Advanced Identity Cloud, PingFederate, or Okta. Candidates must possess skills in scripting languages like JavaScript, Python, Groovy, YAML, or PowerShell, alongside knowledge of SAML, OAuth, and OpenID Connect protocols to solve complex security and access requirements within a large enterprise environment.

What you'll do

  • Design, configure, and maintain enterprise IAM platforms to support authentication, authorization, SSO, and federation.
  • Develop technical and functional designs to address complex business requirements and security objectives.
  • Manage vendor relationships by evaluating software products, reviewing new features, and troubleshooting issues through official channels.
  • Lead the planning and execution of system testing for integration modules and product stories.
  • Resolve technical blockers, defects, and implementation risks for assigned IAM features.
  • Create and maintain comprehensive technical documentation, support procedures, and implementation guidance.
  • Serve as a subject matter expert to provide training and mentorship to team members.

What we're looking for

  • At least 5 years of experience implementing, configuring, administering, or supporting enterprise Identity and Access Management (IAM) solutions.
  • Hands-on experience with enterprise web access management platforms such as IBM Verify, PingAccess, Okta, ForgeRock, or similar tools.
  • Experience implementing and supporting single sign-on (SSO), federation, and authentication/authorization for enterprise applications.
  • Proficiency in writing automation scripts using languages such as JavaScript, Python, Groovy, YAML, or PowerShell.
  • Knowledge of common identity and access standards and protocols including SAML, OAuth, OpenID Connect (OIDC), and federation concepts.
  • Experience gathering complex business requirements and translating them into functional and technical designs.
  • Ability to lead technical discussions, manage project blockers, and mentor team members on IAM processes.
  • Experience with vendor management, including troubleshooting via support tools, reviewing release features, and managing defect resolutions.

More like this

Similar roles

ICAM Architect

Booz Allen Hamilton

McLean, VA 64 days ago $86,800$198,000
Okta Entra ID SAML 2.0 OAuth 2.0 OpenID Connect Java JavaScript Python PowerShell Groovy RESTful APIs Active Directory LDAP Zero Trust MFA Saviynt Sailpoint Omada Oracle IAM CI/CD AWS Cognito Azure AD B2C Keycloak Google Cloud Identity