Senior Identity & Access Management Engineer

Role Description

We are seeking a Senior Identity & Access Management (IAM) Engineer to support and enhance enterprise access management platforms that secure critical applications and digital services across the organization. This role will serve as a lead responsible for designing, configuring, implementing, and supporting commercial IAM solutions while partnering with business and technology teams to deliver secure, scalable access management capabilities.

The ideal candidate will have strong experience with web access management and identity platforms such as:

• IBM Verify Identity Access
• IBM Verify Access
• IBM Security Access Manager (ISAM)
• PingOne Advanced Identity Cloud (PAIC)
• Ping Access
• PingFederate
• PingAM
• Similar enterprise IAM technologies

This individual will play a key role in:

• Product strategy
• Solution design
• Vendor management
• Application integrations
• Troubleshooting
• Testing
• Issue resolution
• Mentoring team members

The Allstate job title for this role is Vended Application Lead Consultant.

Qualifications

• 5 years or more of experience implementing, configuring, administering, or supporting enterprise Identity and Access Management (IAM) solutions (or equivalent)
• Hands-on experience with one or more enterprise web access management or IAM platforms
• Experience configuring or developing within vendor software to support access management
• Experience implementing and supporting single sign-on (SSO), federation, and access management solutions for enterprise applications
• Experience writing automation scripts using scripting languages such as JavaScript, Python, Groovy, YAML, or PowerShell (or equivalent)
• Knowledge of common identity and access standards and protocols, including SAML, OAuth, OpenID Connect (OIDC)
• Experience gathering complex business requirements and translating them into functional and technical designs
• Experience supporting module testing, integration testing, issue resolution, and production troubleshooting
• Ability to lead technical discussions and document resulting decisions
• Experience working with vendor support processes and product documentation
• Ability to manage multiple priorities and drive issue resolution
• Strong analytical, troubleshooting, problem-solving, communication, and stakeholder partnership skills
• Ability to mentor, coach, or train team members
• Equivalent combinations of technical training, certifications, and relevant work experience will be considered

Requirements

• Experience supporting large enterprise IAM or access management environments
• Experience with cloud-based identity platforms, SaaS application integrations, or hybrid identity environments
• Knowledge of directory services such as Active Directory, LDAP, or related identity stores
• Experience with API security, access gateways, reverse proxies, policy configuration, or application onboarding
• Familiarity with Identity Governance Administration (IGA), Privileged Access Management (PAM), adaptive authentication, multi-factor authentication (MFA)
• Experience working in Agile, Scrum, Product Engineering, or similar delivery environments
• Experience evaluating vendor roadmaps and recommending platform enhancements
• Relevant identity, security, cloud, or vendor certifications
• Experience in creating technical documentation, operational procedures, training materials, or platform standards

Benefits

• Support strategic identity and access management initiatives that protect critical enterprise applications
• Work with established and emerging IAM technologies across authentication, authorization, federation, and access control
• Partner with security, infrastructure, application, business, and vendor teams across the organization
• Influence technical direction, platform strategy, vendor engagement, and future IAM capabilities
• Mentor team members and help strengthen access management best practices across the enterprise

Compensation

Compensation offered for this role is $98,100.00 - $167,850.00 annually and is based on experience and qualifications.