Employee discounts (15% on auto and property insurance, plus many other products and services).
Good Office program (receive up to $400 back after purchasing office equipment).
Student Loan Payment Matching Program for Government Student loans.
Comprehensive Retirement Savings Program with employer matched contributions.
Annual Wellness allowance to support employees with improving health and wellbeing.
Personal days.
Tuition Reimbursement.
Working within the community and giving back.
Job description
We are seeking an experienced Senior Ping Advanced Identity Cloud (AIC) Engineer to lead the design, implementation, integration, and support of enterprise identity and access management (IAM) solutions. The ideal candidate will possess deep expertise in Ping Identity technologies, particularly Ping Advanced Identity Cloud (formerly ForgeRock Identity Cloud), and will play a key role in delivering secure, scalable, and compliant identity services across the organization.
This role requires strong technical leadership, hands-on engineering experience, and the ability to collaborate with business stakeholders, security teams, application owners, and infrastructure teams.
This position operates within a hybrid cloud environment supporting enterprise identity services and mission-critical applications. The Senior Ping AIC Engineering will serve as a technical leader responsible for delivering secure, scalable, and resilient IAM solutions aligned with business and security objectives.
Accountabilities
Design, configure, implement, and support Ping Advanced Identity Cloud (AIC) solutions for workforce, customer, and partner identity use cases.
Develop and maintain authentication, authorization, and identity lifecycle management workflows.
Configure and customize journeys, authentication trees, nodes, adaptive authentication, and access policies.
Integrate applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP, and REST APIs.
Implement multi-factor authentication (MFA), passwordless authentication, and risk-based access controls.
Design and support user provisioning and identity governance integrations.
Develop custom scripts, APIs, and connectors to extend Ping AIC functionality.
Troubleshoot complex identity and federation issues across enterprise environments.
Collaborate with cybersecurity teams to ensure IAM solutions meet security, compliance, and regulatory requirements.
Lead technical design reviews, architecture discussions, and implementation planning activities.
Create and maintain technical documentation, operational procedures, and deployment standards.
Provide mentorship and technical guidance to junior IAM engineers and administrators.
Support production environments, incident response activities, and platform optimization initiatives.
Qualifications
Related field or equivalent experience.
7+ years of experience in Identity and Access Management (IAM).
5+ years of hands-on experience with Ping Advanced Identity Cloud (AIC) or ForgeRock Identity Cloud.
Strong knowledge of identity federation and authentication standards including:
SAML 2.0
OAuth 2.0
OpenID Connect (OIDC)
SCIM
LDAP
JWT
Experience designing and implementing MFA and passwordless authentication solutions.
Strong understanding of identity lifecycle management and user provisioning processes.
Experience with REST APIs, JSON, JavaScript, Groovy scripting, or similar technologies.
Experience integrating cloud and on-premises applications with enterprise IAM platforms.
Strong troubleshooting and root cause analysis skills.
Excellent communication and stakeholder management abilities.
Technical leadership and solution ownership
Strategic thinking and architecture design
Cross-functional collaboration
Mentoring and knowledge sharing
Strong written and verbal communication
Customer-focused problem solving
Bonus Qualifications
Experience with additional Ping Identity products such as
PingFederate
PingOne
PingAccess
PingDirectory
PingAuthorize
Experience with cloud platforms including AWS, Azure, or Google Cloud Platform.
Knowledge of Zero Trust security principles.
Experience supporting large-scale enterprise IAM environments.
Relevant certifications in Ping Identity, ForgeRock, cloud platforms, or cybersecurity.
Allstate Canada Group has policies and practices that provide workplace accommodations. If you require accommodation, please let us know and we will work with you to meet your needs.
LI#MK1
Skills
Access Management, Application Programming Interface (API), Cloud Computing, Cloud Platform, Cross-Team Collaboration, Cybersecurity, Identity Access Management (IAM), Identity Governance, Information Security, Problem Resolution, Technical Knowledge
Compensation
Expected compensation for this role ranges from $ 0.00 - 0.00 annually. Actual salary offered to successful candidates will vary based on their skills and experience.
Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.
Allstate Canada Group uses AI technology tools to assist in screening, selecting, assessing, and scheduling interviews with candidates as part of the recruitment process.
This job posting is for a current open role within the organization.
