Identity Verification & Passwordless IAM Engineer

EY; Topeka (KS); Remote; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k) plans

Paid time off & holidays

Job summary

EY recruiting an Identity Verification Engineer to design and support identity verification and passwordless solutions across enterprise IAM ecosystems. The role emphasizes biometrics, liveness detection, and seamless integration of 1Kosmos or Microsoft Verified ID with Entra ID/Azure AD, IdRamp, CLEAR, and AD.

The candidate will contribute to API integrations and SSO protocols (SAML, OIDC, OAuth, SCIM) while ensuring security, compliance, and scalable deployments in a hybrid, client-focused

Qualifications

• 3–5+ years of IAM experience
• 2+ years implementing 1Kosmos or Microsoft Verified ID
• Experience with identity proofing, passwordless authentication, and biometric verification
• Experience with enterprise identity lifecycle management and onboarding processes

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID
• Configure and support document verification, biometric authentication, facial recognition, and liveness detection
• Implement IAL2-grade identity proofing processes per NIST 800-63
• Support onboarding journeys for employees, contractors, vendors, and privileged users
• Configure and administer 1Kosmos BlockID and related services
• Manage user enrollment, credential issuance, identity verification policies, and authentication workflows
• Configure and integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification
• Monitor platform health, performance, and operational effectiveness
• Troubleshoot identity verification and authentication issues
• Integrate 1Kosmos with MS Entra ID/Azure AD, IdRamp, CLEAR, AD
• Develop and support API-based integrations for identity verification and lifecycles
• Configure SAML, OAuth, OIDC, and SCIM integrations
• Implement passwordless strategies (biometrics, mobile authenticators, FIDO2/WebAuthn, QR, push)
• Support enterprise migration to passwordless access
• Ensure security and compliance for IAM solutions
• Develop security documentation and runbooks
• Participate in architecture reviews, POCs, pilots, production rollouts, hypercare
• Collaborate with IAM architects and stakeholders

Skills

Identity Verification

Passwordless Authentication

IAM Integration

1Kosmos / Microsoft Verified ID

Biometrics & Liveness Detection

SAML / OIDC / OAuth

Cloud IAM (Azure/AWS)

API Integrations

Education

Bachelor’s degree in CS/IS/Info Sec or related

Tools

1Kosmos BlockID

Microsoft Entra ID / Azure AD

IdRamp

CLEAR

Active Directory

ServiceNow

SailPoint / Okta / Ping Identity

Job description

EY recruiting an Identity Verification Engineer to design and support identity verification and passwordless solutions across enterprise IAM ecosystems. The role emphasizes biometrics, liveness detection, and seamless integration of 1Kosmos or Microsoft Verified ID with Entra ID/Azure AD, IdRamp, CLEAR, and AD.

The candidate will contribute to API integrations and SSO protocols (SAML, OIDC, OAuth, SCIM) while ensuring security, compliance, and scalable deployments in a hybrid, client-focused