Senior Identity Verification & Passwordless Engineer

EY; Detroit (MI); Remote; USD 110,000 - 170,000; Full time

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos BlockID or Microsoft Verified ID, and to integrate with Entra ID/Azure AD. The role covers configuring biometric verification, liveness detection, and passwordless authentication across employee, contractor, vendor, and privileged user onboarding journeys.

The candidate will manage integrations with IAM platforms, SAML/OAuth/OIDC/SCIM, REST APIs, and various IT systems while ensuring

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.
• 3–5+ years of IAM experience with hands-on implementation.
• 2+ years of hands-on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.
• Experience with enterprise identity lifecycle management and user onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID platform.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2‑grade identity proofing processes aligned with NIST 800-63 guidelines.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.

Skills

1Kosmos BlockID

Azure AD

SAML

OIDC

OAuth 2.0

SCIM

REST APIs

Biometrics

FIDO2/WebAuthn

Education

Bachelor’s degree in Computer Science / Info Security / Information Systems

Tools

1Kosmos BlockID

IdRamp

CLEAR

Entra ID / Azure AD

Active Directory

SailPoint / Saviynt / Okta (preferred)

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos BlockID or Microsoft Verified ID, and to integrate with Entra ID/Azure AD. The role covers configuring biometric verification, liveness detection, and passwordless authentication across employee, contractor, vendor, and privileged user onboarding journeys.

The candidate will manage integrations with IAM platforms, SAML/OAuth/OIDC/SCIM, REST APIs, and various IT systems while ensuring