Senior Identity Verification & Passwordless IAM Engineer

EY; Greenville (SC); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Competitive compensation

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows and manage platform integrations across 1Kosmos and Microsoft Verified ID ecosystems. You will configure biometric verification, liveness checks, and passwordless methods while aligning with NIST 800-63.

The role involves onboarding diverse users, auditing processes, and delivering scalable IAM solutions. The ideal candidate has 3–5+ years in IAM with hands-on 1Kosmos or Verified ID, strong API

Qualifications

• Bachelor’s degree in CS, information security, information systems, or related field.
• 3–5+ years of experience in Identity and Access Management (IAM).
• 2+ years of hands-on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.
• Experience with enterprise identity lifecycle management and user onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID platforms.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2-grade identity proofing processes aligned with NIST 800-63 guidelines.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.
• Configure and administer 1Kosmos BlockID and associated services.
• Manage user enrollment, credential issuance, identity verification policies, and authentication workflows.
• Configure and integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification.
• Monitor platform health, performance, and operational effectiveness.
• Troubleshoot identity verification and authentication issues.
• Integrate 1Kosmos with Microsoft Entra ID / Azure AD.
• Integrate Microsoft Verified ID with IdRAMP and CLEAR.
• Integrate Active Directory.
• Integrate IAM platforms (SailPoint, Saviynt, ISIM/ISVG, Ping, Okta).
• Integrate ITSM platforms (ServiceNow).
• Integrate AWS, Citrix, VMware Horizon, and VDI environments.
• Integrate HR and workforce onboarding systems.
• Develop and support API-based integrations for identity verification and identity lifecycle workflows.
• Configure SAML, OAuth, OIDC, and SCIM integrations.
• Implement passwordless authentication strategies utilizing Biometrics, Mobile authenticators, FIDO2/WebAuthn, QR code authentication, Push-based authentication.
• Support enterprise migration initiatives from traditional authentication to passwordless access.
• Ensure identity verification solutions comply with organizational security requirements and industry standards.
• Support audit and compliance activities related to identity verification and authentication controls.
• Develop security documentation, operational runbooks, and implementation standards.
• Participate in architecture reviews, design workshops, and solution development activities.
• Support POCs, pilot deployments, production rollouts, and hypercare activities.
• Collaborate with IAM architects, cybersecurity teams, application owners, and business stakeholders.

Skills

Identity Proofing

Biometrics

Liveness Detection

Passwordless Authentication

FIDO2/WebAuthn

SAML

OIDC

OAuth 2.0

REST APIs

Azure AD / Entra ID

IAM Experience

Education

Bachelor's degree in CS/Info Security/IS or related field

Tools

1Kosmos BlockID

Microsoft Verified ID

IdRamp

CLEAR

Entra ID / Azure AD

Active Directory

SailPoint

Saviynt

Okta

ServiceNow

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows and manage platform integrations across 1Kosmos and Microsoft Verified ID ecosystems. You will configure biometric verification, liveness checks, and passwordless methods while aligning with NIST 800-63.

The role involves onboarding diverse users, auditing processes, and delivering scalable IAM solutions. The ideal candidate has 3–5+ years in IAM with hands-on 1Kosmos or Verified ID, strong API