Senior Passwordless IAM Implementation Lead (Remote)

1Kosmos Inc.; Oregon; Hybrid; USD 144,000 - 176,000; Full time

Benefits offered by this job

Remote work flexibility

Hybrid in-person collaboration (Edison

Equity or long-term upside

Job summary

1Kosmos Inc. is seeking a Senior Implementation Engineer to lead deployments of passwordless authentication across large enterprises.

You will design SSO and federation architectures using SAML 2.0, OIDC, OAuth 2.0, and WS-Federation, integrating with Entra ID, PingFederate, Okta, ForgeRock, and other providers. The role requires hands-on work across protocols, infrastructure, and code with Python, PowerShell, and JavaScript.

Qualifications

• 5+ years of hands-on IAM, SSO, or Federation implementation experience.
• 5+ years implementing enterprise authentication and access management solutions.
• Experience leading customer-facing technical implementations.
• Experience integrating enterprise applications and SaaS platforms using federation standards.
• Proven ability to manage complex technical deployments involving multiple stakeholders.

Responsibilities

• Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sector customers.
• Conduct discovery workshops, architecture reviews, and technical design sessions.
• Develop implementation plans, migration strategies, and deployment runbooks.
• Serve as the primary technical lead during customer onboarding and production rollouts.
• Manage multiple customer implementations simultaneously while ensuring delivery excellence.

Skills

IAM

SSO

Federation

Python

PowerShell

JavaScript

Bash

REST APIs

JSON/XML

Active Directory

LDAP

MFA

Passwordless

Customer facing

Tools

SAML 2.0

OIDC

OAuth 2.0

WS-Federation

Entra ID

PingFederate

Okta

ForgeRock

Active Directory

Job description

1Kosmos Inc. is seeking a Senior Implementation Engineer to lead deployments of passwordless authentication across large enterprises.

You will design SSO and federation architectures using SAML 2.0, OIDC, OAuth 2.0, and WS-Federation, integrating with Entra ID, PingFederate, Okta, ForgeRock, and other providers. The role requires hands-on work across protocols, infrastructure, and code with Python, PowerShell, and JavaScript.