Identity Verification Engineer — Passwordless & IAM

EY; San Jose (CA); On-site; USD 100,000 - 180,000; Full time

Benefits offered by this job

Hybrid/Remote work options

Flexible vacation policy

Paid time off

Job summary

EY seeks an Identity Verification Engineer to design and implement identity proofing and passwordless authentication across 1Kosmos and Microsoft Verified ID platforms. You will integrate with Entra/Azure AD, IdRamp, CLEAR, and other IAM tools, while ensuring security, compliance, and scalable onboarding for a diverse workforce.

The role involves working on architecture reviews, POCs, and production rollouts with a hybrid/remote setup.

Qualifications

• 3–5+ years of IAM experience.
• 2+ years hands-on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience with identity proofing, passwordless authentication, and biometric verification.
• Experience with enterprise identity lifecycle management and onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2-grade identity proofing per NIST 800-63 guidelines.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.
• Configure and administer 1Kosmos BlockID and related services.
• Manage user enrollment, credential issuance, identity verification policies, and authentication workflows.
• Integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification.
• Monitor platform health, performance, and operational effectiveness; troubleshoot issues.
• Integrate 1Kosmos with Microsoft Entra ID / Azure AD; integrate Verified ID with IdRAMP and CLEAR; integrate Active Directory; integrate IAM platforms (SailPoint, Saviynt, ISIM/ISVG, Ping, Okta).
• Develop and support API-based integrations for identity verification and lifecycle workflows; configure SAML, OAuth, OIDC, SCIM.
• Implement passwordless authentication strategies using biometrics, mobile authenticators, FIDO2/WebAuthn, QR codes, push-based methods; support migrations to passwordless.
• Ensure solutions comply with security requirements and standards; support audit/compliance activities; develop security runbooks and standards.
• Participate in architecture reviews, design workshops, POCs, pilots, production rollouts, and hypercare; collaborate with IAM architects, cybersecurity, owners, and stakeholders.

Skills

IAM

Identity proofing

Biometrics

Passwordless auth

Onboarding workflows

Education

Bachelor’s degree in CS/Info Sec/IS

Tools

1Kosmos BlockID

Microsoft Entra ID/Azure AD

IdRamp

CLEAR

Active Directory

SAML

OIDC

OAuth 2.0

SCIM

REST APIs

Job description

EY seeks an Identity Verification Engineer to design and implement identity proofing and passwordless authentication across 1Kosmos and Microsoft Verified ID platforms. You will integrate with Entra/Azure AD, IdRamp, CLEAR, and other IAM tools, while ensuring security, compliance, and scalable onboarding for a diverse workforce.

The role involves working on architecture reviews, POCs, and production rollouts with a hybrid/remote setup.