Software Engineer - API

The Software Engineer - API partners in designing and building security solutions that will balance the need for speed and flexibility of the infrastructure and IaaS/PaaS/SaaS applications, with the need to protect Allstate against ongoing and potential security threats. This role needs to have the aptitude to understand new security strategies. You will serve as a key member of IAM (Identity and Access Management) Integration Team as an engineer, working with fellow developers, supporting the security and identity and access management services and helping support junior team members. *This role is open across multiple levels.

Key Responsibilities

• Design, build, and maintain secure APIs, microservices, and systems for IAM and related security functions.
• Develop APIs using test-driven and contract-driven approaches to ensure reliability and scalability.
• Investigate and resolve development and production issues across multiple services and layers of the stack.
• Provide production support on a rotational basis, ensuring service availability and incident resolution.
• Apply solid knowledge of the Software Development Lifecycle (SDLC), OOP/SOA principles, and enterprise design patterns.
• Collaborate closely with product managers, engineers, and security teams to deliver business-aligned solutions.
• Contribute actively to improving engineering standards, tooling, and development processes across the team.
• Prepare systems for AI-driven capabilities and future scalability.
• Support monitoring and observability through tools like Datadog and MS Sentinel SIEM.

• All applicants must demonstrate they have a legal right to work in the UK for employment at Allstate. Allstate is not providing sponsorship for this vacancy.
• Minimum 2 years’ experience with REST APIs and common data formats (JSON, XML) or Spring Boot (AOP, Data, JDBC, Security).
• Minimum 1 year of exposure to security concepts such as authentication, authorization, and secure communication (OAuth2.0, JWT).
• Experience with CI/CD pipelines and build tools (Maven, Gradle) and Git for version control.
• Familiarity with databases (RDBMS and NoSQL) and ability to write simple to moderate SQL queries.
• Knowledge of unit testing frameworks (JUnit, Mockito).
• Familiarity with Integrating APIs with identity and security systems (Active Directory, SailPoint, CyberArk, HashiCorp Vault).

• Experience with Python
• Experience with cloud platforms (AWS or Azure)
• Exposure to API gateways (Apigee or similar)
• Exposure to event streaming (Kafka).
• Front-end familiarity (React, Angular, NodeJS)