Lead IAM Security Engineer

State Farm•Bloomington, IL

3d•Hybrid

About The Position

State Farm’s Customer Identity & Access Management (CIAM) team is seeking an experienced Lead Software Engineer to provide technical leadership in designing, developing, and supporting secure, scalable customer identity solutions that protect customer interactions across State Farm’s digital channels. The role partners with Product, Architecture, Information Security, Fraud, Privacy, Enterprise Technology, and Digital Experience teams to modernize authentication and registration while supporting security, reliability, and customer experience. The engineer will lead strategic initiatives including Passkeys, Passwordless Authentication, Identity Verification, Registration Modernization, Adaptive Authentication, and emerging digital identity capabilities. The position owns customer identity products throughout their lifecycle, from design through production support, and helps define the technical vision and future direction of the Customer Identity platform. This is a hybrid role. Qualified candidates must live or relocate within 180 miles of Bloomington, Illinois; Richardson, Texas; or Tempe, Arizona, and work partly from home and partly in the office. Applicants must be immediately authorized to work in the United States; State Farm will not sponsor work authorization for this opportunity.

Requirements

Advanced software engineering practices for designing and building secure full-stack applications.
Experience designing and developing enterprise APIs and identity services.
Ability to apply object-oriented programming, secure coding, automated testing, CI/CD, infrastructure automation, containers, and cloud-native development.
Ability to build highly available and observable services using enterprise monitoring and logging capabilities.
Advanced understanding of software architecture, data movement, integration patterns, and system design.
Ability to influence technical direction and engineering best practices across customer identity solutions.
Knowledge of Customer Identity & Access Management (CIAM).
Knowledge of Okta or similar identity platforms.
Knowledge of identity verification solutions and authentication modernization initiatives.
Knowledge of Passkeys (FIDO2/WebAuthn) and passwordless authentication.
Knowledge of OAuth 2.0, OpenID Connect, and SAML.
Knowledge of Multi-Factor Authentication (MFA), identity federation, and fraud prevention technologies.
Must be eligible to lawfully work in the United States immediately; sponsorship is not available.
Must live or relocate within 180 miles of Bloomington, IL; Richardson, TX; or Tempe, AZ.

Responsibilities

Design, develop, and maintain modern customer identity applications using industry-leading software engineering practices.
Build secure authentication, registration, identity verification, and authorization capabilities.
Design highly available, resilient, and scalable identity services aligned with enterprise architecture and security standards.
Partner with Product Managers, Architects, Information Security, Fraud, Privacy, and Digital Experience teams to understand customer and business needs.
Translate business requirements into secure, scalable technical solutions.
Evaluate emerging technologies and recommend innovative customer identity capabilities.
Design secure APIs and full-stack applications supporting customer authentication and identity services.
Apply secure software engineering practices throughout the development lifecycle and protect customer identity data through secure design, modern authentication protocols, and enterprise security controls.
Ensure technology assets are designed with resiliency, observability, and operational excellence in mind.
Own customer identity products throughout their lifecycle, from design through production support.
Participate in Agile planning, backlog refinement, code reviews, CI/CD, testing, deployment, and continuous improvement.
Support production operations, incident response, and operational readiness.
Design authentication experiences that balance security with usability.
Improve registration, authentication, and identity verification journeys through thoughtful engineering and user-centered design.
Collaborate across teams to deliver frictionless, secure digital experiences.
Lead technical design discussions and architecture decisions.
Mentor engineers and promote engineering excellence across the CIAM organization.
Establish reusable engineering patterns and best practices.
Help define the technical vision and future direction of the Customer Identity platform.
Diagnose and resolve complex production issues.
Support multiple concurrent initiatives while balancing strategic roadmap delivery and production support.

Benefits

Potential yearly incentive pay up to 15% of base salary.
Annual raise and bonus eligibility.
Health and wellbeing programs; State Farm pays most of the healthcare premium, with multiple healthcare plan options.
Medical plans provide 100% coverage for in-network preventive care.
Vision, dental, telemedicine, and access to 24/7 mental health professionals.
Industry-leading training programs and tuition assistance.
Employee resource groups and mentoring.
Fertility, IVF, and adoption assistance.
College coaching, national discount programs, financial workshops, and free financial coaching.
Generous time-off policies, with the opportunity to initially earn up to 20 days annually.
Parental leave, paid holidays, celebration day, life leave, bereavement leave, and community service/education support days.
Matching Gift Program, Good Neighbor Grant Program, and Employee Assistance Fund.
Free financial advisors and a 401(k) plan with company contributions of up to 7% of salary.