Senior IAM & Passwordless Identity Engineer

EY; Arlington (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Paid time off options

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID. You will configure document verification, biometrics, facial recognition, and liveness detection to meet IAL2-grade standards in alignment with NIST 800-63.

You will integrate IAM platforms, contribute to API-based workflows, and support onboarding for a diverse set of users while maintaining security and compliance.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.
• 3-5+ years of IAM experience.
• 2+ years with 1Kosmos or Microsoft Verified ID implementations.
• Experience with identity proofing, passwordless authentication, and biometric verification.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure documents verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2-grade identity proofing per NIST 800-63 guidelines.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.

Skills

1Kosmos BlockID

Microsoft Verified ID

Entra ID / Azure AD

Active Directory

SAML / OAuth / OIDC

REST APIs

Biometrics & Liveness

Passwordless Authentication

Identity Proofing

API Integration

Education

Bachelor's degree in CS/IS

Tools

1Kosmos Platform

IdRamp

CLEAR

ServiceNow

Azure AD

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID. You will configure document verification, biometrics, facial recognition, and liveness detection to meet IAL2-grade standards in alignment with NIST 800-63.

You will integrate IAM platforms, contribute to API-based workflows, and support onboarding for a diverse set of users while maintaining security and compliance.