Identity Verification Engineer: Passwordless & IAM Expert

EY; Jericho (NY); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

EY is seeking an Identity Verification Engineer to drive identity proofing, passwordless authentication, and secure onboarding across employees, contractors, vendors, and privileged users. The role covers integrating 1Kosmos or MS Verified ID platforms with Entra/Azure AD, and ensuring scalable, compliant identity lifecycle workflows.

The candidate will work on architectures, integrat ions with IAM tools (SailPoint, Saviynt, Okta, Ping, etc.), and modern authentication methods such as biometric

Qualifications

• 3–5+ years of experience in Identity and Access Management (IAM).
• 2+ years hands-on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.
• Experience with enterprise identity lifecycle management and user onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID platform.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2-grade identity proofing processes aligned with NIST 800-63 guidelines.

Skills

IAM

Identity proofing

Biometrics

Passwordless authentication

SAML/OIDC/OAuth

API integration

Liveness detection

Education

Bachelor’s degree in Computer Science / Information Security / Information Systems

Tools

1Kosmos BlockID Platform

Microsoft Verified ID

IdRamp

CLEAR

Entra ID / Azure AD

Active Directory

SAML

OIDC

OAuth 2.0

SCIM

REST APIs

ServiceNow

AWS

Citrix

VMware Horizon

VDI

SailPoint

Saviynt

ISIM/ISVG

Ping

Okta

Job description

EY is seeking an Identity Verification Engineer to drive identity proofing, passwordless authentication, and secure onboarding across employees, contractors, vendors, and privileged users. The role covers integrating 1Kosmos or MS Verified ID platforms with Entra/Azure AD, and ensuring scalable, compliant identity lifecycle workflows.

The candidate will work on architectures, integrat ions with IAM tools (SailPoint, Saviynt, Okta, Ping, etc.), and modern authentication methods such as biometric