IAM Integration Engineer - (Hybrid)

At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties. And for more than 90 years our innovative drive has kept us a step ahead of our customers' evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Your role in the team
The IAM Integration Engineer partners in designing and building security solutions that will balance the need for speed and flexibility of the infrastructure and IaaS/PaaS/SaaS applications, with the need to protect Allstate against ongoing and potential security threats. This role needs to have the aptitude to understand new security strategies. In this role, you will serve as a key member of IAM (Identity and Access Management) Integration Team as a senior engineer working with fellow developers supporting the security and identity and access management services and helping support junior team members.

• The IAM Integration Developer will be responsible for the development and implementation of a set of APIs for the Identity Management and other Security teams

• Design and build APIs, microservices and systems and prepare systems for AI-driven capabilities.

• Your role will involve building services and APIs to expose Identity and Access Management and related security capabilities using test-driven and contract-driven approaches.

• You will be in a role in which you will get to demonstrate your deep understanding of Software Development Lifecycle and OOP & SOA principles, Enterprise design patterns and industry best practices

• Debug development and production issues across services and multiple levels of the stack

• Work closely with engineers and product managers. Improve engineering standards, tooling, and processes

• Applicants must have the legal right to work in the UK (no sponsorship available).

• At least 4 years' experience with REST APIs and Java development (CI/CD) in an application security context.

• Experience with cloud platforms (AWS & Azure) and their AI service offerings.

• Hands-on experience with API gateways (Apigee)

• Proven delivery of APIs and microservices REST/SOAP/WSDL/XML/JSON/RADIUS, Spring Boot (AOP, Data, JDBC, Security, Cloud), JPA/Hibernate, JSON, GraphQL and Python.

• Integration expertise with SailPoint, PingID and CyberArk APIs (Safes, account reconciliation, password rotation) and HashiCorp Vault APIs for secrets management.

• Working knowledge of enterprise identity systems such as Microsoft Active Directory (AD).

• Working knowledge of automation with APIs (building scripts, workflows, orchestration).

• Practical experience developing Kafka Stream applications with Kafka APIs/Streams API; ingestion services connecting to RDBMS via Kafka producer/consumer APIs.

• Front-end capability with ReactJS, AngularJS, NodeJS, HTML5, CSS3.

• Proficiency in unit testing (JUnit, Mockito) and build tools (ANT, Gradle, Maven).

• Database skills across RDBMS and NoSQL (MS SQL Server, MongoDB, Redis), with ability to write complex SQL queries and stored procedures.

• Applied knowledge of OAuth2.0 and JWT for secure authentication and communication in Spring Boot APIs.

• Demonstrated use of Datadog (dashboards, metrics, alerts) and MS Sentinel SIEM (dashboards, reports, alerts).

• Work on cross-functional agile development teams to deliver Identity and Access Management and related security capabilities to the organization.

• Participate in code reviews with peers and product managers to ensure that each increment adheres to original vision as described in the user story and all standard resource libraries and architecture patterns as appropriate.