Senior IAM & Identity Proofing Engineer

EY; Birmingham (AL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Paid time off

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID, configure verification and biometric controls, and support passwordless authentication across enterprise systems.

You will integrate 1Kosmos BlockID, IdRamp, CLEAR with Entra ID/Azure AD, SailPoint/Okta, and other IAM tools, while aligning with NIST 800-63 guidelines and onboarding large workforce populations.

Qualifications

• Bachelor's degree in a relevant field.
• 3–5+ years IAM experience.
• 2+ years with 1Kosmos or Microsoft Verified ID implementations.
• Experience with identity proofing, passwordless auth, and biometrics.
• Experience with enterprise identity lifecycle and onboarding.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure document verification, biometric authentication, liveness detection and identity controls.
• Align IAL2-grade proofing with NIST 800-63 guidelines.
• Onboard employees, contractors, vendors, and privileged users.
• Administer 1Kosmos BlockID and related services.
• Manage enrollment, policies, and authentication workflows.
• Integrate with Entra ID / Azure AD, IdRamp, CLEAR, and other IAM platforms.
• Monitor health, performance, and issue resolution.
• Implement passwordless authentication strategies (FIDO2/WebAuthn, biometrics, mobile authenticators).
• Support security/compliance, runbooks, and deployment standards.
• Support architecture reviews, POCs, pilots, and production rollouts.

Skills

1Kosmos BlockID Platform

Microsoft Verified ID

Active Directory

SAML, OIDC, OAuth 2.0, SCIM

REST APIs

Biometrics & Liveness

FIDO2/WebAuthn

Passwordless Authentication

Education

Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field

Tools

IdRamp

CLEAR

Entra ID / Azure AD

SailPoint / Okta (optional)

Active Directory

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID, configure verification and biometric controls, and support passwordless authentication across enterprise systems.

You will integrate 1Kosmos BlockID, IdRamp, CLEAR with Entra ID/Azure AD, SailPoint/Okta, and other IAM tools, while aligning with NIST 800-63 guidelines and onboarding large workforce populations.