Senior Identity Verification & Passwordless IAM Engineer

EY; San Francisco (CA); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work model

Paid time off

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows, configure biometric and passwordless authentication, and manage 1Kosmos BlockID and Microsoft Verified ID platforms. You will integrate Entra ID/Azure AD, IdRamp, CLEAR, and other IAM tools while ensuring NIST 800-63 compliance.

You will support onboarding for employees, contractors, vendors, and privileged users, monitor platform health, and drive secure enterprise authentication initiatives

Qualifications

• 3–5+ years in Identity and Access Management (IAM).
• 2+ years implementing 1Kosmos or Microsoft Verified ID.
• Experience with identity proofing, passwordless authentication, and biometrics.
• Experience with enterprise identity lifecycle and onboarding processes.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure document verification, biometric authentication, and liveness checks.
• Implement IAL2-grade proofing per NIST 800-63.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.
• Administer 1Kosmos BlockID and related services.
• Manage enrollment, policies, and authentication workflows.
• Integrate IAM with Entra ID/Azure AD, IdRamp, CLEAR, and other platforms.
• Monitor health, troubleshoot issues, and maintain security standards.

Skills

IAM experience

Identity proofing

Passwordless auth

Biometrics

Onboarding workflows

Education

Bachelor’s degree in Computer Science or related

Tools

1Kosmos BlockID

Microsoft Verified ID

IdRamp

CLEAR

Entra ID / Azure AD

Active Directory

SAML

OIDC

OAuth 2.0

SCIM

REST APIs

FIDO2/WebAuthn

Job description

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows, configure biometric and passwordless authentication, and manage 1Kosmos BlockID and Microsoft Verified ID platforms. You will integrate Entra ID/Azure AD, IdRamp, CLEAR, and other IAM tools while ensuring NIST 800-63 compliance.

You will support onboarding for employees, contractors, vendors, and privileged users, monitor platform health, and drive secure enterprise authentication initiatives