Senior IAM & Passwordless Identity Engineer

EY; Toledo (OH); On-site; USD 110,000 - 140,000; Full time

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows, configure verification and biometric systems, and ensure secure onboarding for employees and contractors. The role includes administering 1Kosmos BlockID, integrating IdRamp and CLEAR with Entra ID, and overseeing platform health and security compliance.

The ideal candidate will have 3–5+ years in IAM, 2+ years with 1Kosmos or Microsoft Verified ID, and hands-on experience with identity proofing,

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.
• 3–5+ years of experience in Identity and Access Management (IAM).
• 2+ years of hands-on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.
• Experience with enterprise identity lifecycle management and user onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID platform.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2‑grade identity proofing processes aligned with NIST 800-63 guidelines.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.
• Configure and administer 1Kosmos BlockID and associated services.
• Manage user enrollment, credential issuance, identity verification policies, and authentication workflows.
• Configure and integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification.
• Monitor platform health, performance, and operational effectiveness.

Skills

IAM

Passwordless

Biometrics

Liveness Detection

Education

Bachelor's degree in CS/IS/Security

Tools

1Kosmos BlockID

Microsoft Verified ID

IdRamp

CLEAR

Entra ID/Azure AD

Active Directory

SAML

OIDC

OAuth 2.0

SCIM

REST APIs

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows, configure verification and biometric systems, and ensure secure onboarding for employees and contractors. The role includes administering 1Kosmos BlockID, integrating IdRamp and CLEAR with Entra ID, and overseeing platform health and security compliance.

The ideal candidate will have 3–5+ years in IAM, 2+ years with 1Kosmos or Microsoft Verified ID, and hands-on experience with identity proofing,