Tech Consulting - Cybersecurity Privacy -Identity Verification Engineer - Senior

Location:

Anywhere in Country

We are seeking an experienced Identity Verification Engineer with hands‑on expertise in 1

Kosmos or Microsoft Verified  Platform
, identity proofing, passwordless authentication, and enterprise IAM integrations. This role will be responsible for designing, implementing, and supporting identity verification and passwordless solutions that leverage biometrics, document verification, liveness detection, verifiable credentials, and passwordless authentication technologies.

The ideal candidate will have extensive experience integrating 1

Kosmos or Microsoft Verified  enterprise IAM ecosystems, Microsoft Entra Verified , IdRamp, CLEAR, Active Directory, ITSM platforms, virtual desktop environments, and cloud applications to deliver secure and scalable identity verification capabilities.

• Design and implement identity proofing workflows using the 1
  
  Kosmos or Microsoft Verified .
• Configure and support document verification, biometric authentication, facial recognition, liveness detection, and identity assurance controls.
• Implement IAL2‑grade identity proofing processes aligned with NIST 800‑63 guidelines.
• Support onboarding journeys for employees, contractors, vendors, and privileged users.

• Configure and administer 1
  
  Kosmos BlockID and associated services.
• Manage user enrollment, credential issuance, identity verification policies, and authentication workflows.
• Configure and integrate IdRamp and CLEAR with Microsoft Entra for orchestration and biometrics verification.
• Monitor platform health, performance, and operational effectiveness.
• Troubleshoot identity verification and authentication issues.

• Integrate 1
  
  Kosmos with Microsoft Entra  / Azure AD.
• Integrate Microsoft Verified  IdRamp and CLEAR.
• Active Directory.
• IAM platforms (SailPoint, Saviynt, ISIM/ISVG, Ping, Okta).
• ITSM platforms (Service Now).
• AWS, Citrix, VMware Horizon, and VDI environments.
• HR and workforce onboarding systems.
• Develop and support API‑based integrations for identity verification and identity lifecycle workflows.
• Configure SAML, OAuth, OIDC, and SCIM integrations.

• Implement passwordless authentication strategies utilizing biometrics.
• Implement passwordless authentication strategies utilizing mobile authenticators.
• Implement passwordless authentication strategies utilizing FIDO2/Web Authn.
• Implement passwordless authentication strategies utilizing QR code authentication.
• Implement passwordless authentication strategies utilizing push‑based authentication.
• Support enterprise migration initiatives from traditional authentication to passwordless access.

• Ensure identity verification solutions comply with organizational security requirements and industry standards.
• Support audit and compliance activities related to identity verification and authentication controls.
• Develop security documentation, operational runbooks, and implementation standards.

• Participate in architecture reviews, design workshops, and solution development activities.
• Support POCs, pilot deployments, production rollouts, and hypercare activities.
• Collaborate with IAM architects, cybersecurity teams, application owners, and business stakeholders.

• Bachelor’s degree in Computer Science, Information Security, Information Systems, or related field.

• 3‑5+ years of experience in Identity and Access Management (IAM).
• 2+ years of hands‑on 1
  
  Kosmos or Microsoft Verified  experience.
• Experience implementing identity proofing, passwordless authentication, and biometric verification solutions.
• Experience with enterprise identity lifecycle management and user onboarding processes.

• 1
  
  Kosmos BlockID Platform.
• Microsoft Verified , IdRamp, CLEAR, Entra  / Azure AD.
• Active Directory.
• SAML, OIDC, OAuth 2.0, SCIM.
• REST APIs and integration frameworks.
• Identity Proofing & Verification.
• Biometrics and Liveness Detection.
• FIDO2/Web Authn.
• Passwordless Authentication.

• Experience with SailPoint ISC, Identity IQ, Saviynt, Ping Identity, or Okta.
• Kno…