Identity Verification Engineer: Passwordless IAM Expert

EY; Palo Alto (CA); Remote; USD 126,000 - 219,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing, passwordless authentication, and biometrics across enterprise IAM ecosystems. You’ll integrate 1Kosmos with Entra/Azure AD, IdRamp, CLEAR, and other platforms, ensuring secure, scalable identity verification.

The role covers platform administration, APIs, and security/compliance, with a focus on onboarding employees, contractors, vendors, and privileged users.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Systems, or related field.
• 3-5+ years of experience in Identity and Access Management (IAM).
• 2+ years of hands-on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience with identity proofing, passwordless authentication, and biometric verification solutions.
• Experience with enterprise identity lifecycle management and user onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure and support document verification, biometric authentication, facial recognition, and liveness detection.
• Implement IAL2-grade identity proofing per NIST 800-63.
• Integrate 1Kosmos with Microsoft Entra ID/Azure AD and other IAM platforms.
• Develop and support API-based integrations for identity verification and lifecycle workflows.
• Configure SAML, OAuth, OIDC, and SCIM integrations.
• Monitor platform health and troubleshoot issues.

Skills

IAM

1Kosmos/Microsoft Verified ID

Identity proofing

Biometrics verification

Passwordless authentication

SAML/OIDC/OAuth

REST APIs

AD/Azure AD Entra

Liveness detection

Biometric verification

Education

Bachelor’s degree in CS, Info Sec, Info Systems

Tools

1Kosmos BlockID

Microsoft Verified ID

IdRamp

CLEAR

Entra ID / Azure AD

Active Directory

SAML

OIDC

OAuth 2.0

SCIM

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing, passwordless authentication, and biometrics across enterprise IAM ecosystems. You’ll integrate 1Kosmos with Entra/Azure AD, IdRamp, CLEAR, and other platforms, ensuring secure, scalable identity verification.

The role covers platform administration, APIs, and security/compliance, with a focus on onboarding employees, contractors, vendors, and privileged users.