Tech Consulting - Cybersecurity Privacy -Identity Verification Engineer - Senior - Location Open

EY; Indianapolis (IN); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Paid time off

Job summary

EY is seeking an Identity Verification Engineer to design and implement IAM workflows, integrate with Entra ID/Azure AD, and advance passwordless authentication across enterprise onboarding and access control. The role emphasizes collaboration with IAM architects and security teams in a hybrid, US-focused environment.

Applicants should have 3–5+ years of IAM experience and hands-on work with 1Kosmos or Microsoft Verified ID, identity proofing, and biometric verification, aiming to reduce risk

Qualifications

• Bachelor’s degree in CS, Information Security, Information Systems, or related field.
• 3–5+ years of experience in Identity and Access Management (IAM).
• 2+ years hands-on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID platform.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2‑grade identity proofing processes aligned with NIST 800-63 guidelines.
• Integrate 1Kosmos with Microsoft Entra ID / Azure AD.
• Develop and support API‑based integrations for identity verification and identity lifecycle workflows.
• Configure SAML, OAuth, OIDC, and SCIM integrations.

Skills

1Kosmos BlockID

Microsoft Verified ID

Azure AD / Entra ID

Active Directory

SAML / OIDC / OAuth 2.0

REST APIs

Passwordless Authentication

Biometrics & Liveness

Identity Proofing

FIDO2/WebAuthn

Education

Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field

Tools

1Kosmos BlockID

IdRamp

CLEAR

Entra ID / Azure AD

SailPoint

Saviynt

Okta

ServiceNow

AWS

Job description

Location: Anywhere in Country

Identity Verification Engineer

Key Responsibilities

Identity Verification & Proofing

• Design and implement identity proofing workflows using the 1Kosmos or Microsoft Verified ID platform.
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2‑grade identity proofing processes aligned with NIST 800-63 guidelines.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.

1Kosmos or Microsoft Verified ID Platform Administration

• Configure and administer 1Kosmos BlockID and associated services.
• Manage user enrollment, credential issuance, identity verification policies, and authentication workflows.
• Configure and integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification.
• Monitor platform health, performance, and operational effectiveness.
• Troubleshoot identity verification and authentication issues.

Integration & Engineering

• Integrate 1Kosmos with Microsoft Entra ID / Azure AD.
• Integrate Microsoft Verified ID with IdRAMP and CLEAR.
• Integrate Active Directory.
• Integrate IAM platforms (SailPoint, Saviynt, ISIM/ISVG, Ping, Okta).
• Integrate ITSM platforms (ServiceNow).
• Integrate AWS, Citrix, VMware Horizon, and VDI environments.
• Integrate HR and workforce onboarding systems.
• Develop and support API‑based integrations for identity verification and identity lifecycle workflows.
• Configure SAML, OAuth, OIDC, and SCIM integrations.

Passwordless Authentication

• Implement passwordless authentication strategies utilizing Biometrics, Mobile authenticators, FIDO2/WebAuthn, QR code authentication, Push‑based authentication.
• Support enterprise migration initiatives from traditional authentication to passwordless access.

Security & Compliance

• Ensure identity verification solutions comply with organizational security requirements and industry standards.
• Support audit and compliance activities related to identity verification and authentication controls.
• Develop security documentation, operational runbooks, and implementation standards.

Project Delivery

• Participate in architecture reviews, design workshops, and solution development activities.
• Support POCs, pilot deployments, production rollouts, and hypercare activities.
• Collaborate with IAM architects, cybersecurity teams, application owners, and business stakeholders.

Required Qualifications

Education

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.

Experience

• 3-5+ years of experience in Identity and Access Management (IAM).
• 2+ years of hands‑on 1Kosmos or Microsoft Verified ID implementation experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.
• Experience with enterprise identity lifecycle management and user onboarding processes.

Technical Skills

• 1Kosmos BlockID Platform.
• Microsoft Verified ID, IdRamp, CLEAR, Entra ID / Azure AD.
• Active Directory.
• SAML, OIDC, OAuth 2.0, SCIM.
• REST APIs and integration frameworks.
• Identity Proofing & Verification.
• Biometrics and Liveness Detection.
• FIDO2/WebAuthn.
• Passwordless Authentication.

Preferred Qualifications

• Experience with SailPoint ISC, IdentityIQ, Saviynt, Ping Identity, or Okta.
• Knowledge of Verifiable Credentials (VCs), Decentralized Identity (DID), and Microsoft Entra Verified ID.
• Experience supporting large‑scale workforce or contractor onboarding programs.
• Familiarity with NIST Digital Identity Guidelines (800-63).
• Knowledge of cloud environments including Azure and AWS.
• Relevant certifications:
  • Certified Identity and Access Manager (CIAM)
  • CISSP
  • Microsoft Identity & Access Administrator
  • Other security certifications related to IAM

Key Success Metrics

• Successful deployment of identity verification and passwordless authentication solutions.
• Reduction in account takeover and impersonation risks.
• Improved onboarding user experience.
• High identity proofing completion rates.
• Compliance with security and regulatory requirements.
• Stable and scalable enterprise integrations.

What We Offer You

• A comprehensive compensation and benefits package with a base salary range for the US and additional details.
• A flexible environment and hybrid work model.
• A flexible vacation policy and paid time off options.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1‑800‑EY‑HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail].