Tech Consulting - Cybersecurity Privacy -Identity Verification Engineer - Senior - Location Open

EY; Portland (OR); Hybrid; USD 105,000 - 219,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is seeking an Identity Verification Engineer to design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID, biometrics, liveness, and document verification. You will integrate with Entra ID/Azure AD, IdRamp, CLEAR, and IAM ecosystems to deliver scalable security solutions.

You will collaborate with IAM architects, cybersecurity teams, and business stakeholders, supporting onboarding journeys for employees, contractors, and privileged users while ensuring

Qualifications

• 3–5+ years of IAM experience and 2+ years hands-on 1Kosmos or Microsoft Verified ID experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification.
• Proven ability to integrate IAM platforms and on‑premises/cloud apps at scale.

Responsibilities

• Design and implement identity proofing workflows using 1Kosmos or Microsoft Verified ID.
• Configure document verification, biometric authentication, liveness, and identity assurance controls.
• Integrate 1Kosmos with Entra ID, Azure AD, IdRamp, CLEAR, and enterprise IAM ecosystems.
• Develop and support API integrations for identity verification and lifecycle workflows.

Skills

1Kosmos / Microsoft Verified ID

Identity proofing

Passwordless authentication

Biometrics

SAML / OAuth / OIDC

REST APIs

Azure AD / Entra ID

IAM integration

Education

Bachelor’s degree in Computer Science or related field

Tools

1Kosmos BlockID

Microsoft Entra ID / Azure AD

IdRamp

CLEAR

Active Directory

ServiceNow (ITSM)

SAML / OAuth / OIDC / SCIM

Job description

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

We are seeking an experienced Identity Verification Engineer with hands‑on expertise in 1Kosmos or Microsoft Verified ID Identity Platform , identity proofing, passwordless authentication, and enterprise IAM integrations. This role will be responsible for designing, implementing, and supporting identity verification and passwordless solutions that leverage biometrics, document verification, liveness detection, verifiable credentials, and passwordless authentication technologies.

The ideal candidate will have extensive experience integrating 1Kosmos or Microsoft Verified ID with enterprise IAM ecosystems, Microsoft Entra Verified ID, IdRamp, CLEAR, Active Directory, ITSM platforms, virtual desktop environments, and cloud applications to deliver secure and scalable identity verification capabilities.

Key Responsibilities

Identity Verification & Proofing

• Design and implement identity proofing workflows using the 1Kosmos or Microsoft Verified ID platform.

• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.

• Implement IAL2-grade identity proofing processes aligned with NIST 800-63 guidelines.

• Support onboarding journeys for employees, contractors, vendors, and privileged users.

1Kosmos or Microsoft Verified ID Platform Administration

• Configure and administer 1Kosmos BlockID and associated services.

• Manage user enrollment, credential issuance, identity verification policies, and authentication workflows.

• Configure and integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification

• Monitor platform health, performance, and operational effectiveness.

• Troubleshoot identity verification and authentication issues.

Integration & Engineering

• Integrate 1Kosmos with:

• Microsoft Entra ID / Azure AD

• Integrate Microsoft Verified ID with IdRAMP and CLEAR

• Active Directory

• IAM platforms (SailPoint, Saviynt, ISIM/ISVG, Ping, Okta)

• ITSM platforms (ServiceNow)

• AWS, Citrix, VMware Horizon, and VDI environments

• HR and workforce onboarding systems

• Develop and support API-based integrations for identity verification and identity lifecycle workflows.

• Configure SAML, OAuth, OIDC, and SCIM integrations.

Passwordless Authentication

• Implement passwordless authentication strategies utilizing:

• Biometrics

• Mobile authenticators

• FIDO2/WebAuthn

• QR code authentication

• Push-based authentication

• Support enterprise migration initiatives from traditional authentication to passwordless access.

Security & Compliance

• Ensure identity verification solutions comply with organizational security requirements and industry standards.

• Support audit and compliance activities related to identity verification and authentication controls.

• Develop security documentation, operational runbooks, and implementation standards.

Project Delivery

• Participate in architecture reviews, design workshops, and solution development activities.

• Support POCs, pilot deployments, production rollouts, and hypercare activities.

• Collaborate with IAM architects, cybersecurity teams, application owners, and business stakeholders.

Required Qualifications

Education

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.

Experience

• 3-5+ years of experience in Identity and Access Management (IAM)

• 2+ years of hands‑on 1Kosmos or Microsoft Verified ID implementation experience.

• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.

• Experience with enterprise identity lifecycle management and user onboarding processes.

Technical Skills

• 1Kosmos BlockID Platform

• Microsoft Verified ID, IdRamp, CLEAR, Entra ID / Azure AD

• Active Directory

• SAML, OIDC, OAuth 2.0, SCIM

• REST APIs and integration frameworks

• Identity Proofing & Verification

• Biometrics and Liveness Detection

• FIDO2/WebAuthn

• Passwordless Authentication

Preferred Qualifications

• Experience with SailPoint ISC, IdentityIQ, Saviynt, Ping Identity, or Okta

• Knowledge of Verifiable Credentials (VCs), Decentralized Identity (DID), and Microsoft Entra Verified ID.

• Experience supporting large‑scale workforce or contractor onboarding programs.

• Familiarity with NIST Digital Identity Guidelines (800‑63).

• Knowledge of cloud environments including Azure and AWS.

• Relevant certifications:

• Certified Identity and Access Manager (CIAM)

• CISSP

• Microsoft Identity & Access Administrator

• Security certifications related to IAM

Key Success Metrics

• Successful deployment of identity verification and passwordless authentication solutions

• Reduction in account takeover and impersonation risks.

• Improved onboarding user experience.

• High identity proofing completion rates.

• Compliance with security and regulatory requirements.

• Stable and scalable enterprise integrations.

What we offer you

At EY, we’ll develop you with future‑focused skills and equip you with world‑class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more .

• We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $104,800 to $192,200. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $125,800 to $218,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

• Join us in our team‑led and leader‑enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.

• Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well‑being.

For those living in California, please click here for additional information.

EY focuses on high‑ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail] .