Information Security Expert in Winnipeg

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. For more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs.

Who is Allstate: Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. Serving Canadians since 1953, Allstate strives to reassure both customers and employees with its “You’re in Good Hands®” promise and is proud to have been named a Best Employer in Canada for nine consecutive years. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism.

Role Designation: Remote

Benefits to joining Allstate:

• Flexible Work Arrangements.
• Employee discounts (15% on auto and property insurance, plus many other products and services).
• Good Office program (receive up to $400 back after purchasing office equipment).
• Student Loan Payment Matching Program for Government Student loans.
• Comprehensive Retirement Savings Program with employer matched contributions.
• Annual Wellness allowance to support employees with improving health and wellbeing.
• Personal days.
• Tuition Reimbursement.
• Working within the community and giving back.

We are seeking an experienced Senior Ping Advanced Identity Cloud (AIC) Engineer to lead the design, implementation, integration, and support of enterprise identity and access management (IAM) solutions. The ideal candidate will possess deep expertise in Ping Identity technologies, particularly Ping Advanced Identity Cloud (formerly ForgeRock Identity Cloud), and will play a key role in delivering secure, scalable, and compliant identity services across the organization. This role requires strong technical leadership, hands-on engineering experience, and the ability to collaborate with business stakeholders, security teams, application owners, and infrastructure teams. This position operates within a hybrid cloud environment supporting enterprise identity services and mission-critical applications.

The Senior Ping AIC Engineering will serve as a technical leader responsible for delivering secure, scalable, and resilient IAM solutions aligned with business and security objectives.

Accountabilities:

• Design, configure, implement, and support Ping Advanced Identity Cloud (AIC) solutions for workforce, customer, and partner identity use cases.
• Develop and maintain authentication, authorization, and identity lifecycle management workflows.
• Configure and customize journeys, authentication trees, nodes, adaptive authentication, and access policies.
• Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and REST APIs.
• Implement multi-factor authentication (MFA), passwordless authentication, and risk-based access controls.
• Design and support user provisioning and identity governance integrations.
• Develop custom scripts, APIs, and connectors to extend Ping AIC functionality.
• Troubleshoot complex identity and federation issues across enterprise environments.
• Collaborate with cybersecurity teams to ensure IAM solutions meet security, compliance, and regulatory requirements.
• Lead technical design reviews, architecture discussions, and implementation planning activities.
• Create and maintain technical documentation, operational procedures, and deployment standards.
• Provide mentorship and technical guidance to junior IAM engineers and administrators.
• Support production environments, incident response activities, and platform optimization initiatives.

Qualifications:

• Related field or equivalent experience.
• 7+ years of experience in Identity and Access Management (IAM).
• 5+ years of hands-on experience with Ping Advanced Identity Cloud (AIC) or ForgeRock Identity Cloud.
• Strong knowledge of identity federation and authentication standards including: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, JWT.
• Experience designing and implementing MFA and passwordless authentication solutions.
• Strong understanding of identity lifecycle management and user provisioning processes.
• Experience with REST APIs, JSON, JavaScript, Groovy scripting, or similar technologies.
• Experience integrating cloud and on-premises applications with enterprise IAM platforms.
• Strong troubleshooting and root cause analysis skills.
• Excellent communication and stakeholder management abilities.
• Technical leadership and solution ownership.
• Strategic thinking and architecture design.
• Cross-functional collaboration.
• Mentoring and knowledge sharing.
• Strong written and verbal communication.
• Customer-focused problem solving.

Bonus Qualifications:

• Experience with additional Ping Identity products such as: PingFederate, PingOne, PingAccess, PingDirectory, PingAuthorize.
• Experience with cloud platforms including AWS, Azure, or Google Cloud Platform.
• Knowledge of Zero Trust security principles.
• Experience supporting large-scale enterprise IAM environments.
• Relevant certifications in Ping Identity, ForgeRock, cloud platforms, or cybersecurity.

Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs.

Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.