Principal Engineer, Workforce, Customer & Agentic Identity

Allstate

Allstate Principal Engineer modernizing workforce, customer, machine, and AI-agent identity systems. Driving IAM architecture, Zero Trust adoption, and secure authentication experiences across the insurer’s enterprise.

Posted 8/14/2026full-timeRemote • Illinois • 🇺🇸 United StatesLead💰 $199,000 - $274,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in designing and implementing enterprise Identity and Access Management (IAM) solutions, with a strong focus on Zero Trust architectures and customer-centric identity experiences. Proven ability to lead technical strategy, influence stakeholders, and drive enterprise-wide adoption of identity modernization initiatives.

Highest-signal resume keywords

Identity And Access Management (IAM)Zero Trust ArchitecturePing IdentitySailPointMFA Implementation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity GovernanceAccess CertificationFederationSingle Sign-On (SSO)Privileged Access ManagementRisk-Based AuthenticationFine-Grained AuthorizationLifecycle ManagementMachine IdentitiesCloud-Native Identity Models

Soft Skills

Change LeadershipStakeholder ManagementTechnical LeadershipCustomer-Centric MindsetInfluencing Without Authority

Tools & Technologies

Identity PlatformsEmerging Identity StandardsAI Identity ConceptsAuthorization FrameworksEngineering Standards

Certifications & Qualifications

CISSPCCSPSailPoint CertificationPing Identity CertificationMicrosoft Security Certification

Industry Keywords

AuthenticationAuthorizationGovernance ModelsAgentic SystemsSecurity Compliance

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Define and drive technical strategy and architecture for workforce, customer, machine, and agentic identity platforms across the enterprise
Improve customer authentication experiences while maintaining security, governance, and compliance standards
Partner with engineers, architects, product teams, and security leaders to design, implement, and modernize identity solutions
Provide technical leadership for authentication, authorization, federation, identity governance, lifecycle management, privileged access management, and access certification
Evaluate, design, and adopt identity platforms and technologies including Ping Identity, SailPoint, and emerging identity standards
Drive Zero Trust initiatives through MFA, risk-based authentication, fine-grained authorization, identity governance, and least-privilege controls
Define identity strategies and governance models for machine identities, service accounts, workload identities, and AI agents
Establish identity controls and lifecycle processes for autonomous and agentic systems
Drive enterprise adoption of identity modernization initiatives by articulating business value, customer impact, and security outcomes
Collaborate with digital product teams to create secure, scalable customer identity experiences
Participate in architecture, troubleshooting, integration design, and implementation efforts
Mentor engineering teams and drive technical excellence
Establish engineering standards, reference architectures, and best practices for the identity roadmap and Zero Trust strategy
Influence vendor roadmaps and product strategies
Perform supervisory duties

Requirements

What you’ll need

12+ years of experience designing and implementing enterprise Identity and Access Management (IAM) solutions
Working knowledge of Ping Identity, SailPoint, or similar identity and access management platforms
Strong knowledge of customer identity, workforce identity, federation, SSO, MFA, privileged access management, identity governance, and access certification
Experience designing and implementing Zero Trust identity architectures, including conditional access, risk-based authentication, fine-grained authorization, and least-privilege access controls
Experience supporting machine identities, workload identities, service accounts, certificates, secrets management, and cloud-native identity models
Familiarity with emerging AI and agentic identity concepts, governance models, and authorization frameworks
Proven ability to influence senior leaders, drive enterprise adoption, and communicate complex technical strategies across diverse stakeholder groups
Ability to influence enterprise strategy and drive adoption of identity modernization initiatives
Strong change leadership and stakeholder management skills
Technical leadership experience guiding architectures, engineering standards, and best practices
Customer-centric mindset balancing security, usability, and business outcomes
Ability to lead through influence, navigate ambiguity, and drive enterprise-wide change without direct authority
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related technical field
Preferred IAM or security certifications such as CISSP, CCSP, SailPoint, Ping Identity, or Microsoft Security
Must submit to a background investigation
Allstate generally does not sponsor individuals for employment-based visas for this position
For home working, a dedicated private workspace, appropriate desk and seating, and reliable internet with minimum speeds of 50 MB download and 5 MB upload are required

Benefits

Comp & perks

Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse
Monthly connectivity reimbursement to help offset internet costs
Remote work arrangement
Opportunity to shape the future of protection while supporting meaningful causes
Innovative work environment fostering exploration of ideas
Reliable home-working setup support requirements, including dedicated private workspace and appropriate desk and seating