Senior Identity Verification Engineer: Passwordless IAM

EY; Providence (RI); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Competitive compensation

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID, and to configure biometric verification, passwordless authentication, and liveness checks. You will integrate IAM platforms, manage onboarding workflows, and ensure security controls align with NIST 800-63.

You will collaborate with enterprise IT teams to deliver API-based integrations, SSO/SCIM configurations, and passwordless strategies across AD and cloud

Qualifications

• Bachelor’s degree in CS/IS or related field.
• 3–5+ years IAM experience.
• 2+ years with 1Kosmos or Microsoft Verified ID.
• Experience with passwordless authentication and biometrics.
• Experience with enterprise identity lifecycle management and onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2-grade identity proofing per NIST 800-63.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.
• Configure and administer 1Kosmos BlockID and related services.
• Manage enrollments, policies, and authentication workflows.
• Integrate IAM platforms (SailPoint, Saviynt, Okta, etc.) with systems.
• Develop API-based integrations for identity workflows.
• Configure SAML, OAuth, OIDC, and SCIM integrations.
• Implement passwordless strategies using biometrics and FIDO2/WebAuthn.

Skills

IAM

Identity proofing

Passwordless authentication

Biometrics

User onboarding

REST APIs

Education

Bachelor’s degree in Computer Science/Information Security/Information Systems

Tools

1Kosmos BlockID

Microsoft Entra ID / Azure AD

IdRamp

CLEAR

Active Directory

SAML/OIDC/OAuth/SCIM

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID, and to configure biometric verification, passwordless authentication, and liveness checks. You will integrate IAM platforms, manage onboarding workflows, and ensure security controls align with NIST 800-63.

You will collaborate with enterprise IT teams to deliver API-based integrations, SSO/SCIM configurations, and passwordless strategies across AD and cloud