below marketmost similar roles pay hereabove market
This role pays less than
85%
of similar roles. Most pay
$149,000–$211,400
— the blue band above.
At the midpoint, this role pays about
$133k
versus about
$180k
for comparable roles.
Based on 240 similar postings.
Employer
About Allstate
The Allstate Corporation is one of the largest publicly held personal lines insurers in the US, widely recognized for its "You're In Good Hands With Allstate®" slogan.
Allstate currently has
40 open roles
on FindRole.
Listed pay typically runs
$100,000–$170,500
across 40 roles with salary data.
The Systems Engineer, Lead Consultant Identity & Authentication leads efforts to research, design, plan, and maintain network hardware and software technology components. Working within the identity and authentication space, this role involves executing tasks related to analysis, integration, and resolving complex incidents affecting production systems. Key responsibilities include performing root cause analysis, developing monitoring tools, and leading the implementation of hardware and software components. The position requires expertise in Identity and Access Management (IAM) solutions, specifically Active Directory Domain Services, ADFS, Microsoft Entra ID, and Certificate Services. Candidates must be proficient in PowerShell scripting, APIs, Infrastructure as Code, and authentication protocols like LDAP, Kerberos, SAML, and OAuth. The role addresses technical problems involving identity security, Zero Trust principles, and hybrid environment resiliency.
Research, design, plan, and maintain new and existing network hardware and software technology components.
Execute tasks related to analysis, integration, and troubleshooting for complex incidents affecting production systems.
Identify and recommend major changes for network components to ensure incident avoidance.
Perform root cause analysis and escalate high-complexity problems to improve application and hardware resiliency.
Lead the support for production service requests and routine administration of network infrastructure.
Develop and maintain tools for monitoring, modifying, and maintaining hardware and software components.
Perform testing, debugging, performance analysis, and documentation for complex hardware and software components.
Lead the implementation of network components by analyzing environments and performing complex product customizations.
What we're looking for
5+ years of experience designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions in complex hybrid environments.
Advanced experience with Active Directory Domain Services, ADFS, Microsoft Entra ID, ADCS, and Hybrid Identity.
Strong proficiency in PowerShell scripting, automation, APIs, Infrastructure as Code (IaC), and modern engineering practices.
Experience with authentication and federation technologies including LDAP, Kerberos, SAML, OAuth, OpenID Connect, and certificate-based authentication.
Experience administering Group Policy, DNS, Windows Server Update Services, and System Center Operations Manager in enterprise environments.
Knowledge of identity security, Zero Trust principles, and identity governance.
Experience leading technical initiatives, mentoring engineers, and providing technical guidance across cross-functional teams.
Experience with privileged access management, certificate lifecycle management, or cloud identity platforms (preferred).
System Security
Information Assurance
Cybersecurity
Security Assessment
Operating Systems
CISSP
CISM
CISA
Program Management
Security Tools
IT Security
Microsoft Entra ID
Active Directory
AWS IAM Identity Center
Zero Trust
PAM
PKI
SAML
OAuth
LDAP
ADFS
MIM
Kerberos
DNS
Certificate Services
MFA
Conditional Access
Federation