Apply on Employer Site

Allstate · 1 day ago

Security Architect - Microsoft Entra ID

United States

Full-time

Remote

Senior Level

$96K/yr - $171K/yr

7+ years exp

Allstate is a company dedicated to protecting families and their belongings from life’s uncertainties. They are seeking a highly skilled Security Architect with expertise in Microsoft Entra ID to design, implement, and govern secure Azure Application Registrations and integrations while addressing complex security challenges within the Line 1 Risk team.

BankingFinanceFinancial ServicesInsuranceInsurTechVenture Capital

No H1B

Responsibilities

Architect and secure Azure Application Registrations within Allstate’s Microsoft Entra ID tenant

Govern permission and consent management, enforcing least privilege through robust delegated and application permission models

Manage user and admin consent settings and develop automated workflows for reviewing and approving sensitive permission requests

Implement application access reviews to validate permissions and ensure least privilege access

Securely manage application secrets and certificates, integrating with Azure Key Vault

Design and enforce Conditional Access policies based on user, location, device, and risk signals

Integrate security checks into CI/CD pipelines for application registration configurations

Collaborate with development, DevOps, and infrastructure teams to embed security into application lifecycle

Conduct threat modeling and risk assessments for authentication and authorization flows

Monitor application and service principal activity using Microsoft Sentinel, Azure Monitor, and Entra ID audit logs

Lead structured problem-solving efforts for complex, high-impact security and identity-related challenges

Develop and propose actionable, scalable solutions aligned with enterprise risk appetite and security strategy

Drive end-to-end execution of solutions—ensuring delivery, stakeholder alignment, and measurable outcomes

Influence teams and leadership to adopt new approaches and remediate systemic issues

Collaborate with engineering, operations, and governance teams to ensure solutions are embedded and sustained

Track and report progress on key initiatives, highlighting risk reduction and business impact

Stay current on emerging threats, technologies, and regulatory requirements to inform strategic decisions

Qualification

Microsoft Entra IDAzure Application RegistrationsIdentity GovernanceConditional AccessAzure RBACSAMLOAuth 2.0OpenID ConnectSCIMAnalytical ThinkingData VisualizationInformation Technology Risk ManagementRisk Mitigation StrategiesRisk Reporting