Senior Implementation Engineer

• Microsoft Entra
• Microsoft Entra

We are seeking a highly motivated and customer-facing Senior Implementation Engineer to join our Professional Services and Customer Success organization. This role will lead the deployment and integration of the 1

Kosmos passwordless authentication and identity verification platform across enterprise customers.

The ideal candidate possesses deep expertise in SSO, federation, modern authentication protocols, identity architecture, and enterprise application integrations. The candidate should be comfortable working directly with customer architects, security teams, infrastructure teams, and executive stakeholders while driving successful implementations from design through production deployment.

This is a hands-on technical role requiring a blend of IAM expertise, implementation consulting, troubleshooting, automation, and customer engagement skills.

• Lead end-to-end deployment of 1
  
  Kosmos solutions for enterprise and public-sector customers.
• Conduct discovery workshops, architecture reviews, and technical design sessions
• Develop implementation plans, migration strategies, and deployment runbooks
• Serve as the primary technical lead during customer onboarding and production rollouts
• Manage multiple customer implementations simultaneously while ensuring delivery excellence.

• Design and implement Single Sign-On (SSO) integrations using: SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, WS-Federation.
• Integrate 1
  
  Kosmos with enterprise Identity Providers including:
  Microsoft Entra , Ping Federate, Okta, ADFS, Forge Rock, Custom Identity Providers.
• Configure federation trust relationships, claims mappings, authentication policies, and user provisioning workflows.
• Troubleshoot authentication failures, token issues, certificate problems, and federation-related incidents.

• Deploy passwordless authentication solutions utilizing: FIDO2, Passkeys, Web Authn, Mobile-based authentication, Certificate-based authentication.
• Implement identity proofing and verification workflows
• Design phishing-resistant authentication architectures aligned with Zero Trust principles
• Integrate passwordless authentication into VPNs, VDI environments, workforce applications, and customer-facing applications.

• Integrate with:
  Active Directory, LDAP, Microsoft Entra , HR systems, SIEM platforms, MFA solutions.
• Deploy and support 1
  
  Kosmos components.
• Support hybrid, multi-cloud, and on-premises deployment models.

• Develop automation scripts and integration tools using:
  Python, Power Shell, JavaScript.
• Build and troubleshoot REST API integrations.
• Create deployment automation and operational tooling.
• Assist customers with custom integrations and identity workflows.

• Act as a trusted technical advisor for customer IAM and authentication initiatives.
• Mentor customer teams on best practices for passwordless authentication adoption.
• Support escalated technical issues and complex production environments.
• Collaborate with Product, Engineering, Support, and Customer Success teams to resolve customer challenges.
• Provide implementation feedback to influence product roadmap and feature enhancements.

• 9+ years of hands-on IAM, SSO, or Federation implementation experience.
• 5+ years implementing enterprise authentication and access management solutions.
• Experience leading customer-facing technical implementations.
• Experience integrating enterprise applications and SaaS platforms using federation standards.
• Proven ability to manage complex technical deployments involving multiple stakeholders.

• SAML 2.0
• OpenID Connect (OIDC)
• OAuth 2.0
• SCIM
• Active Directory
• LDAP
• Microsoft Entra
• MFA and Passwordless Authentication
• PKI and Certificate Management
• REST APIs
• JSON and XML
• Experience with one or more:
  Microsoft Entra , Ping Identity Ping Federate, Okta, Forge Rock, SailPoint, Cyber Ark
• Programming/Scripting experience:
  Python, Power Shell, JavaScript, Bash

• Lead successful deployments of 1
  
  Kosmos across enterprise customers.
• Deliver seamless SSO integrations for critical business applications.
• Enable customers to transition from legacy MFA solutions to phishing-resistant passwordless authentication.
• Become a trusted technical advisor for customer IAM and authentication strategies.
• Consistently achieve high customer satisfaction scores and successful production go-lives.

• Flexible Hybrid Work Model
• Medical / Dental / Vision / 401k