Lead Consultant, Identity & Authentication

Allstate

. Lead and initiate research, analysis, design, selection, planning, engineering, implementation, testing, debugging, performance analysis, and documentation of network hardware and software technology components .

Posted 10/9/2026full-timeRemote • CanadaSenior💰 CA$93,500 - CA$143,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions, with a strong focus on Active Directory technologies and automation practices. Proven ability to lead technical initiatives, mentor engineers, and ensure robust security and compliance in complex hybrid environments.

Highest-signal resume keywords

Identity And Access Management (IAM)Active Directory Domain Services (ADDS)PowerShell ScriptingAuthentication And Federation TechnologiesTechnical Guidance And Mentoring

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity SecurityZero Trust PrinciplesInfrastructure As Code (IaC)Group Policy (GPO) AdministrationDomain Name System (DNS) ManagementWindows Server Update Services (WSUS)System Center Operations Manager (SCOM)Troubleshooting And Problem-SolvingAutomation FrameworksCI/CD Pipelines

Soft Skills

Analytical SkillsStrong Communication Skills

Tools & Technologies

Microsoft Entra IDActive Directory Federation Services (ADFS)Active Directory Certificate Services (ADCS)LDAPKerberosSAMLOAuthOpenID Connect (OIDC)GitHubAI-Assisted Development

Certifications & Qualifications

Microsoft Certified: Identity And Access Administrator Associate (SC-300)Microsoft Certified: Azure Administrator Associate (AZ-104)Microsoft Certified: Azure Security Engineer Associate (AZ-500)Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Industry Keywords

Hybrid EnvironmentsIncident ResolutionConfiguration ManagementTechnical InitiativesCross-Functional Teams

Tech Stack

Tools & technologies

AzureCloudCyber SecurityDNS

About the role

Key responsibilities & impact

Lead and initiate research, analysis, design, selection, planning, engineering, implementation, testing, debugging, performance analysis, and documentation of network hardware and software technology components
Identify and recommend major and significant changes to moderately complex network hardware and software components to prevent incidents
Resolve incidents and perform root cause analysis; escalate high-complexity incidents and problems to improve application, hardware, and software resiliency
Ensure plans integrate effectively with other technical hardware and software components
Support production service requests, routine administration, and moderately complex network hardware and software infrastructure
Develop and maintain tools for maintaining, modifying, and monitoring hardware and software technology components
Implement technology components by analyzing current system environments and infrastructure, using technical tools and utilities, and performing complex product customizations
Collaborate with other engineers to ensure infrastructure interactions, data conversion impacts, and business function and performance requirements are addressed
Help define and update configuration management plan items
Provide technical guidance and mentor engineers across cross-functional teams

Requirements

What you’ll need

5+ years of experience designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions in complex hybrid environments
Advanced experience with Active Directory Domain Services (ADDS), Active Directory Federation Services (ADFS), Microsoft Entra ID, Active Directory Certificate Services (ADCS), and Hybrid Identity
Strong proficiency in PowerShell scripting, automation, APIs, Infrastructure as Code (IaC), and modern engineering practices
Experience with authentication and federation technologies including LDAP, Kerberos, SAML, OAuth, OpenID Connect (OIDC), WS-Federation, and certificate-based authentication
Experience administering and supporting Group Policy (GPO), Domain Name System (DNS), Windows Server Update Services (WSUS), and System Center Operations Manager (SCOM) in enterprise environments
Knowledge of identity security, Zero Trust principles, and identity governance
Strong analytical, troubleshooting, and problem-solving skills
Experience leading technical initiatives, mentoring engineers, and providing technical guidance across cross-functional teams
Strong English communication skills are required for positions open to candidates across Canada
Bonus: Experience with privileged access management, certificate lifecycle management, or cloud identity platforms
Bonus: Experience with GitHub, CI/CD pipelines, Infrastructure as Code, and automation frameworks
Bonus: Familiarity with AI-assisted development, intelligent automation, operational analytics, or emerging AI technologies
Bonus: Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Bonus: Microsoft Certified: Azure Administrator Associate (AZ-104)
Bonus: Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Bonus: Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Benefits

Comp & perks

Flexible Work Arrangements
Employee discounts (15% on auto and property insurance, plus many other products and services)
Good Office program (receive up to $400 back after purchasing office equipment)
Student Loan Payment Matching Program for Government Student loans
Comprehensive Retirement Savings Program with employer matched contributions
Annual Wellness allowance to support employees with improving health and wellbeing
Personal days
Tuition Reimbursement
Working within the community and giving back
Workplace accommodations