Lead Engineering, Authentication Engineering in Winnipeg

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. For more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs.

Who is Allstate: Allstate Insurance Company of Canada is a leading home and auto insurer focused on providing its customers prevention and protection products and services for every stage of life. Serving Canadians since 1953, Allstate strives to reassure both customers and employees with its “You’re in Good Hands®” promise and is proud to have been named a Best Employer in Canada for nine consecutive years. Allstate is committed to making a positive difference in the communities in which it operates through partnerships with charitable organizations, employee giving and volunteerism.

Role Designation: Remote

Benefits to joining Allstate:

• Flexible Work Arrangements.
• Employee discounts (15% on auto and property insurance, plus many other products and services).
• Good Office program (receive up to $400 back after purchasing office equipment).
• Student Loan Payment Matching Program for Government Student loans.
• Comprehensive Retirement Savings Program with employer matched contributions.
• Annual Wellness allowance to support employees with improving health and wellbeing.
• Personal days.
• Tuition Reimbursement.
• Working within the community and giving back.

Job description: We are seeking a highly technical and innovative Lead Engineering, Authentication Engineering (Senior Manager) to lead the design, implementation, and advancement of enterprise authentication platforms. Multiple Managing Engineers for authentication teams will report to this role. This role will provide technical leadership for authentication solutions, including directory infrastructure, multi-factor authentication (MFA), PKI, privileged access management and vaulting solutions and an in-house developed application for password and MFA management. The successful candidate will partner closely with Product Management, Cybersecurity, Infrastructure Engineering, Application Teams, and Operations to deliver secure, scalable, and resilient authentication capabilities that align with strategic directions including AI enablement, Zero Trust, Infrastructure as Code, and automation.

Accountabilities:

• Partner with Authentication Lead Product Manager for creation of strategy, roadmaps, prioritization, and implementation of solutions.
• Lead the strategy, architecture, and engineering of enterprise authentication solutions, ensuring they meet business needs while delivering a secure, seamless user experience.
• Design, implement, and modernize authentication solutions, including MFA, PKI, SSO, privileged access management, vaulting, and cloud-native authentication platforms to enable Zero Trust capabilities including passwordless, phishing-resistant authentication, Just-In-Time (JIT) and Just-Enough (JEA) access.
• Drive increased automation and Infrastructure as Code including test driven development practices for validation and control testing.
• Lead large-scale authentication migrations and technology transformations, while continuously improving platforms to reduce user friction and increase adoption.
• Partner with security, infrastructure, cloud, application, and AI teams to deliver scalable, resilient authentication services and support security integration into application automation, AI workflows, agentic AI capabilities.
• Provide technical leadership and people development by coaching Managing Engineers, leading technical product design reviews, and providing direction for engineering best practices.
• Influence clients and partners to prioritize for enterprise benefit and risk reduction and assist in driving the adoption of technology solutions that leverage existing patterns, practices, and reference architectures.
• Strengthen the organization’s security posture by implementing and enhancing controls to address gaps and vulnerabilities identified through audits, assessments, red team, penetration testing, vulnerability scanning, and proactive threat modeling.
• Own the reliability, resiliency, and operational excellence of authentication services by defining and achieving SLOs, improving service availability and performance, instrumenting and enhancing observability, and leading incident response efforts to reduce MTTR.
• Evaluate emerging technologies and industry trends, establish engineering standards and best practices, and provide technical leadership across authentication domains.

Requirements:

• 5 to 10 years or more of experience in information technology or engineering, with responsibilities in authentication engineering.
• At least three (3) years of experience in one or more management positions.
• Experience leading large-scale enterprise projects.

Technical Skills:

• Strong technical expertise and enterprise experience in most of the following areas:
• Strong expertise in Active Directory and Microsoft Entra ID.
• Experience with PKI solutions, such as Active Directory Certificate Services (AD CS), HashiCorp, Entrust, Sectigo, and DigiCert.
• Experience with multi-factor authentication solutions, such as Microsoft Authenticator and Duo.
• Experience implementing authentication solutions on-premises and in the cloud (AWS, Azure, or Google Cloud Platform [GCP]).
• Experience automating authentication solutions and processes.
• Experience deploying configurations using continuous integration and continuous deployment (CI/CD) pipelines, using technologies like GitHub, Jenkins, GitHub Actions, Terraform, and Ansible.

Assets:

• Experience with privileged access management and vault solutions (CyberArk, HashiCorp Vault, Azure Key Vault, AWS Secrets Manager, GCP Secret Manager, etc.).
• Experience with hardware tokens and smart cards for time-based one-time passwords (TOTP), FIDO2, and personal identity verification (PIV) cards, including Duo, Thales, and YubiKey.
• Deep knowledge of authentication protocols, such as SAML, OAuth 2.0, OpenID Connect, Kerberos, LDAP, and certificate-based authentication.
• Understanding of attack techniques targeting authentication, threat actors, exploitation methods, and mitigation controls.
• Experience with scripting languages, such as PowerShell and Python.
• Understanding of full-stack Java development.
• Understanding of security standards and compliance requirements, including NIST, ISO, PCI, HIPAA, and SOX.

If you are applying for a position open to candidates across Canada, unless otherwise indicated, strong English communication skills are required, as the role involves regular interaction with clients, advisors, or employees across the country. Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs.