Tech Consulting - Cybersecurity Privacy -Identity Verification Engineer - Senior - Location Open
About the role
We are seeking an experienced Identity Verification Engineer with hands-on expertise in 1Kosmos or Microsoft Verified ID Identity Platform, identity proofing, passwordless authentication, and enterprise IAM integrations. This role will be responsible for designing, implementing, and supporting identity verification and passwordless solutions that leverage biometrics, document verification, liveness detection, verifiable credentials, and passwordless authentication technologies.
Responsibilities
- Identity Verification & Proofing
- Design and implement identity proofing workflows using the 1Kosmos or Microsoft Verified ID platform.
- Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
- Implement IAL2-grade identity proofing processes aligned with NIST 800-63 guidelines.
- Support onboarding journeys for employees, contractors, vendors, and privileged users.
- 1Kosmos or Microsoft Verified ID Platform Administration
- Configure and administer 1Kosmos BlockID and associated services.
- Manage user enrollment, credential issuance, identity verification policies, and authentication workflows.
- Configure and integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification
- Maintain platform health, performance, and operational effectiveness.
- Troubleshoot identity verification and authentication issues.
- Integration & Engineering
- Integrate 1Kosmos with:
- Microsoft Entra ID / Azure AD
- Integrate Microsoft Verified ID with IdRAMP and CLEAR
- Active Directory
- IAM platforms (SailPoint, Saviynt, ISIM/ISVG, Ping, Okta)
- ITSM platforms (ServiceNow)
- AWS, Citrix, VMware Horizon, and VDI environments
- HR and workforce onboarding systems
- Develop and support API-based integrations for identity verification and identity lifecycle workflows.
- Configure SAML, OAuth, OIDC, and SCIM integrations.
- Passwordless Authentication
- Implement passwordless authentication strategies utilizing:
- Biometrics
- Mobile authenticators
- FIDO2/WebAuthn
- QR code authentication
- Push-based authentication
- Support enterprise migration initiatives from traditional authentication to passwordless access.
- Security & Compliance
- Ensure identity verification solutions comply with organizational security requirements and industry standards.
- Support audit and compliance activities related to identity verification and authentication controls.
- Develop security documentation, operational runbooks, and implementation standards.
- Project Delivery
- Participate in architecture reviews, design workshops, and solution development activities.
- Support POCs, pilot deployments, production rollouts, and hypercare activities.
- Collaborate with IAM architects, cybersecurity teams, application owners, and business stakeholders.
- Education
- Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.
- Experience
- 3-5+ years of experience in Identity and Access Management (IAM)
- 2+ years of hands-on 1Kosmos or Microsoft Verified ID implementation experience.
- Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.
- Experience with enterprise identity lifecycle management and user onboarding processes.
- Technical Skills
- 1Kosmos BlockID Platform
- Microsoft Verified ID, IdRamp, CLEAR, Entra ID / Azure AD
- Active Directory
- SAML, OIDC, OAuth 2.0, SCIM
- REST APIs and integration frameworks
- Identity Proofing & Verification
- Biometrics and Liveness Detection
- FIDO2/WebAuthn
- Passwordless Authentication
- Experience with SailPoint ISC, IdentityIQ, Saviynt, Ping Identity, or Okta
- Knowledge of Verifiable Credentials (VCs), Decentralized Identity (DID), and Microsoft Entra Verified ID.
- Experience supporting large-scale workforce or contractor onboarding programs.
- Familiarity with NIST Digital Identity Guidelines (800-63).
- Knowledge of cloud environments including Azure and AWS.
- Relevant certifications:
- Certified Identity and Access Manager (CIAM)
- CISSP
- Microsoft Identity & Access Administrator
- Security certifications related to IAM
Qualifications
Preferred Qualifications
What we offer you
We offer a comprehensive compensation and benefits package where you'll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $104,800 to $192,200. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $125,800 to $218,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.