Principal Engineer, Workforce, Customer & Agentic Identity

Key Responsibilities 

• Define and drive the technical strategy and architecture for workforce, customer, machine, and agentic identity platforms across the enterprise. 

• Champion identity as a business enabler by improving customer authentication experiences while maintaining strong security, governance, and compliance standards. 

• Partner directly with engineers, architects, product teams, and security leaders to design, implement, and modernize identity solutions. 

• Provide technical leadership for authentication, authorization, federation, identity governance, lifecycle management, privileged access management, and access certification capabilities. 

• Lead the evaluation, design, and adoption of identity platforms and technologies, including Ping Identity, SailPoint, and emerging identity standards. 

• Drive Zero Trust initiatives through implementation of MFA, risk-based authentication, fine-grained authorization, identity governance, and least-privilege access controls.  

• Define identity strategies and governance models for machine identities, service accounts, workload identities, and emerging AI agents. 

• Establish identity controls and lifecycle processes for autonomous and agentic systems, including delegated authority, ownership, governance, and privileged access management. 

• Influence and drive enterprise adoption of identity modernization initiatives by clearly articulating business value, customer impact, and security outcomes. 

• Collaborate with digital product teams to create seamless, secure, and scalable customer identity experiences that improve engagement, trust, and retention. 

• Remain actively involved in architecture, troubleshooting, integration design, and implementation efforts while mentoring engineering teams and driving technical excellence. 

• Establish engineering standards, reference architectures, and best practices that advance Allstate's long-term identity roadmap and Zero Trust strategy.  
   

Skills & Capabilities 

• Ability to influence enterprise strategy and drive adoption of identity modernization initiatives. 

• Strong change leadership and stakeholder management skills across engineering, security, product, and business teams. 

• Proven ability to communicate the value of identity solutions and build consensus around technical decisions. 

• Technical leadership experience guiding architectures, engineering standards, and best practices. 

• Customer-centric mindset focused on balancing security, usability, and business outcomes. 

• Ability to lead through influence, navigate ambiguity, and drive enterprise-wide change without direct authority. 

• Experience influencing vendor roadmaps and product strategies to align with evolving business objectives and operational priorities. 
   

Experience 

• 12+ years of experience designing and implementing enterprise Identity and Access Management (IAM) solutions. 

• Working knowledge of Ping Identity, SailPoint, or similar identity and access management platforms. 

• Strong knowledge of customer identity, workforce identity, federation, SSO, MFA, privileged access management, identity governance, and access certification. 

• Experience designing and implementing Zero Trust identity architectures, including conditional access, risk-based authentication, fine-grained authorization, and least-privilege access controls.  

• Experience supporting machine identities, workload identities, service accounts, certificates, secrets management, and cloud-native identity models. 

• Familiarity with emerging AI and agentic identity concepts, governance models, and authorization frameworks. 

• Proven ability to influence senior leaders, drive enterprise adoption, and communicate complex technical strategies across diverse stakeholder groups. 
   

Education 

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical field. 

• Preferred: Relevant IAM or security certifications such as CISSP, CCSP, SailPoint, Ping Identity, Microsoft Security, or equivalent. 

Supervisory Responsibilities  

• This job has supervisory duties.