Senior Implementation Engineer

1Kosmos; Edison (NJ); Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible Hybrid Work Model

Medical / Dental / Vision / 401k

Job summary

1Kosmos is seeking a Senior Implementation Engineer to lead deployment and integration of passwordless authentication and identity verification across enterprise customers. The role requires collaboration with customer architects, security and infrastructure teams, and executives from design through production deployment.

This hands-on IAM role demands deep expertise in SSO, federation, and modern authentication protocols, with experience implementing enterprise authentication, and driving

Qualifications

• 9+ years of hands-on IAM, SSO, or Federation implementation experience.
• 5+ years implementing enterprise authentication and access management solutions.
• Experience leading customer-facing technical implementations.
• Experience integrating enterprise applications and SaaS platforms using federation standards.
• Proven ability to manage complex technical deployments involving multiple stakeholders.

Responsibilities

• Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sector customers.
• Conduct discovery workshops, architecture reviews, and technical design sessions
• Develop implementation plans, migration strategies, and deployment runbooks
• Serve as the primary technical lead during customer onboarding and production rollouts
• Manage multiple customer implementations simultaneously while ensuring delivery excellence.
• SSO & Federation Integration: Design and implement SSO integrations using SAML 2.0, OIDC, OAuth 2.0, WS-Federation.
• Integrate 1Kosmos with enterprise Identity Providers including Microsoft Entra ID, PingFederate, Okta, ADFS, ForgeRock, Custom Identity Providers.
• Configure federation trust relationships, claims mappings, authentication policies, and user provisioning workflows.
• Troubleshoot authentication failures, token issues, certificate problems, and federation-related incidents.
• Passwordless & Identity Verification: Deploy passwordless authentication using FIDO2, Passkeys, WebAuthn, Mobile-based authentication, Certificate-based authentication.
• Implement identity proofing and verification workflows.
• Design phishing-resistant authentication architectures aligned with Zero Trust principles.
• Integrate passwordless authentication into VPNs, VDI environments, workforce applications, and customer-facing applications.
• Enterprise Infrastructure Integration: Integrate with Active Directory, LDAP, Microsoft Entra ID, HR systems, SIEM platforms, MFA solutions.
• Deploy and support 1Kosmos components.
• Support hybrid, multi-cloud, and on-premises deployment models.
• Automation & Development: Develop automation scripts and integration tools using Python, PowerShell, JavaScript.
• Build and troubleshoot REST API integrations.
• Create deployment automation and operational tooling.
• Assist customers with custom integrations and identity workflows.
• Customer Success & Escalation Support: Act as trusted technical advisor for customer IAM and authentication initiatives.
• Mentor customer teams on passwordless adoption.
• Support escalated technical issues and complex production environments.
• Collaborate with Product, Engineering, Support, and Customer Success teams to resolve challenges.
• Provide implementation feedback to influence product roadmap.

Skills

IAM

SSO

Federation

Passwordless

Security architecture

Customer engagement

Tools

Microsoft Entra ID

PingFederate

Okta

ForgeRock

AD FS

Job description

• Microsoft Entra ID
• Microsoft Entra ID

We are seeking a highly motivated and customer-facing Senior Implementation Engineer to join our Professional Services and Customer Success organization. This role will lead the deployment and integration of the 1Kosmos passwordless authentication and identity verification platform across enterprise customers.

The ideal candidate possesses deep expertise in SSO, federation, modern authentication protocols, identity architecture, and enterprise application integrations. The candidate should be comfortable working directly with customer architects, security teams, infrastructure teams, and executive stakeholders while driving successful implementations from design through production deployment.

This is a hands-on technical role requiring a blend of IAM expertise, implementation consulting, troubleshooting, automation, and customer engagement skills.

Requirements

Key Responsibilities

Customer Implementation & Delivery

• Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sector customers.
• Conduct discovery workshops, architecture reviews, and technical design sessions
• Develop implementation plans, migration strategies, and deployment runbooks
• Serve as the primary technical lead during customer onboarding and production rollouts
• Manage multiple customer implementations simultaneously while ensuring delivery excellence.

SSO & Federation Integration

• Design and implement Single Sign-On (SSO) integrations using: SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, WS-Federation.
• Integrate 1Kosmos with enterprise Identity Providers including: Microsoft Entra ID, PingFederate, Okta, ADFS, ForgeRock, Custom Identity Providers.
• Configure federation trust relationships, claims mappings, authentication policies, and user provisioning workflows.
• Troubleshoot authentication failures, token issues, certificate problems, and federation-related incidents.

Passwordless & Identity Verification

• Deploy passwordless authentication solutions utilizing: FIDO2, Passkeys, WebAuthn, Mobile-based authentication, Certificate-based authentication.
• Implement identity proofing and verification workflows
• Design phishing-resistant authentication architectures aligned with Zero Trust principles
• Integrate passwordless authentication into VPNs, VDI environments, workforce applications, and customer-facing applications.

Enterprise Infrastructure Integration

• Integrate with: Active Directory, LDAP, Microsoft Entra ID, HR systems, SIEM platforms, MFA solutions.
• Deploy and support 1Kosmos components.
• Support hybrid, multi-cloud, and on-premises deployment models.

Automation & Development

• Develop automation scripts and integration tools using: Python, PowerShell, JavaScript.
• Build and troubleshoot REST API integrations.
• Create deployment automation and operational tooling.
• Assist customers with custom integrations and identity workflows.

Customer Success & Escalation Support

• Act as a trusted technical advisor for customer IAM and authentication initiatives.
• Mentor customer teams on best practices for passwordless authentication adoption.
• Support escalated technical issues and complex production environments.
• Collaborate with Product, Engineering, Support, and Customer Success teams to resolve customer challenges.
• Provide implementation feedback to influence product roadmap and feature enhancements.

Required Qualifications

Experience

• 9+ years of hands-on IAM, SSO, or Federation implementation experience.
• 5+ years implementing enterprise authentication and access management solutions.
• Experience leading customer-facing technical implementations.
• Experience integrating enterprise applications and SaaS platforms using federation standards.
• Proven ability to manage complex technical deployments involving multiple stakeholders.

Technical Expertise

• SAML 2.0
• OpenID Connect (OIDC)
• OAuth 2.0
• SCIM
• Active Directory
• LDAP
• Microsoft Entra ID
• MFA and Passwordless Authentication
• PKI and Certificate Management
• REST APIs
• JSON and XML
• Experience with one or more: Microsoft Entra ID, Ping Identity PingFederate, Okta, ForgeRock, SailPoint, CyberArk
• Programming/Scripting experience: Python, PowerShell, JavaScript, Bash

What Success Looks Like

• Lead successful deployments of 1Kosmos across enterprise customers.
• Deliver seamless SSO integrations for critical business applications.
• Enable customers to transition from legacy MFA solutions to phishing-resistant passwordless authentication.
• Become a trusted technical advisor for customer IAM and authentication strategies.
• Consistently achieve high customer satisfaction scores and successful production go-lives.

Benefits

• Flexible Hybrid Work Model
• Medical / Dental / Vision / 401k