Information Security Expert

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection. 

We are seeking an experienced Senior Ping Advanced Identity Cloud (AIC) Engineer to lead the design, implementation, integration, and support of enterprise identity and access management (IAM) solutions. The ideal candidate will possess deep expertise in Ping Identity technologies, particularly Ping Advanced Identity Cloud (formerly ForgeRock Identity Cloud), and will play a key role in delivering secure, scalable, and compliant identity services across the organization.

This role requires strong technical leadership, hands-on engineering experience, and the ability to collaborate with business stakeholders, security teams, application owners, and infrastructure teams.

This position operates within a hybrid cloud environment supporting enterprise identity services and mission-critical applications. The Senior Ping AIC Engineering will serve as a technical leader responsible for delivering secure, scalable, and resilient IAM solutions aligned with business and security objectives.

• Design, configure, implement, and support Ping Advanced Identity Cloud (AIC) solutions for workforce, customer, and partner identity use cases.

• Develop and maintain authentication, authorization, and identity lifecycle management workflows.

• Configure and customize journeys, authentication trees, nodes, adaptive authentication, and access policies.

• Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and REST APIs.

• Implement multi-factor authentication (MFA), passwordless authentication, and risk-based access controls.

• Design and support user provisioning and identity governance integrations.

• Develop custom scripts, APIs, and connectors to extend Ping AIC functionality.

• Troubleshoot complex identity and federation issues across enterprise environments.

• Collaborate with cybersecurity teams to ensure IAM solutions meet security, compliance, and regulatory requirements.

• Lead technical design reviews, architecture discussions, and implementation planning activities.

• Create and maintain technical documentation, operational procedures, and deployment standards.

• Provide mentorship and technical guidance to junior IAM engineers and administrators.

• Support production environments, incident response activities, and platform optimization initiatives.

• Related field or equivalent experience.

• 7+ years of experience in Identity and Access Management (IAM).

• 5+ years of hands-on experience with Ping Advanced Identity Cloud (AIC) or ForgeRock Identity Cloud.

• Strong knowledge of identity federation and authentication standards including:

  • SAML 2.0

  • OAuth 2.0

  • OpenID Connect (OIDC)

  • SCIM

  • LDAP

  • JWT

• Experience designing and implementing MFA and passwordless authentication solutions.

• Strong understanding of identity lifecycle management and user provisioning processes.

• Experience with REST APIs, JSON, JavaScript, Groovy scripting, or similar technologies.

• Experience integrating cloud and on-premises applications with enterprise IAM platforms.

• Strong troubleshooting and root cause analysis skills.

• Excellent communication and stakeholder management abilities.

• Technical leadership and solution ownership

• Strategic thinking and architecture design

• Cross-functional collaboration

• Mentoring and knowledge sharing

• Strong written and verbal communication

• Customer-focused problem solving

• Experience with additional Ping Identity products such as:

  • PingFederate

  • PingOne

  • PingAccess

  • PingDirectory

  • PingAuthorize

• Experience with cloud platforms including AWS, Azure, or Google Cloud Platform.

• Knowledge of Zero Trust security principles.

• Experience supporting large-scale enterprise IAM environments.

• Relevant certifications in Ping Identity, ForgeRock, cloud platforms, or cybersecurity.

Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs. 

LI#MK1

Allstate Canada Group uses AI technology tools to assist in screening, selecting, assessing, and scheduling interviews with candidates as part of the recruitment process.

This job posting is for a current open role within the organization.