Senior Implementation Engineer

We are seeking a highly motivated and customer-facing Senior Implementation Engineer to join our Professional Services and Customer Success organization. This role will lead the deployment and integration of the 1

Kosmos passwordless authentication and identity verification platform across enterprise customers.

• Lead end-to-end deployment of 1
  
  Kosmos solutions for enterprise and public-sector customers.
• Conduct discovery workshops, architecture reviews, and technical design sessions.
• Develop implementation plans, migration strategies, and deployment runbooks.
• Serve as the primary technical lead during customer onboarding and production rollouts.
• Manage multiple customer implementations simultaneously while ensuring delivery excellence.

• Design and implement Single Sign-On (SSO) integrations using SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, and WS-Federation.
• Integrate 1
  
  Kosmos with enterprise Identity Providers including Microsoft Entra , Ping Federate, Okta, ADFS, Forge Rock, and custom Identity Providers.
• Configure federation trust relationships, claims mappings, authentication policies, and user provisioning workflows.
• Troubleshoot authentication failures, token issues, certificate problems, and federation-related incidents.

• Deploy passwordless authentication solutions utilizing FIDO2, Passkeys, Web Authn, mobile-based authentication, and certificate-based authentication.
• Implement identity proofing and verification workflows.
• Design phishing-resistant authentication architectures aligned with Zero Trust principles.
• Integrate passwordless authentication into VPNs, VDI environments, workforce applications, and customer-facing applications.

• Integrate with Active Directory, LDAP, Microsoft Entra , HR systems, SIEM platforms, and MFA solutions.
• Deploy and support 1
  
  Kosmos components.
• Support hybrid, multi-cloud, and on-premises deployment models.

• Develop automation scripts and integration tools using Python, Power Shell, and JavaScript.
• Build and troubleshoot REST API integrations.
• Create deployment automation and operational tooling.
• Assist customers with custom integrations and identity workflows.

• Act as a trusted technical advisor for customer IAM and authentication initiatives.
• Mentor customer teams on best practices for passwordless authentication adoption.
• Support escalated technical issues and complex production environments.
• Collaborate with Product, Engineering, Support, and Customer Success teams to resolve customer challenges.
• Provide implementation feedback to influence product roadmap and feature enhancements.

• 9+ years of hands-on IAM, SSO, or Federation implementation experience.
• 5+ years implementing enterprise authentication and access management solutions.
• Experience leading customer-facing technical implementations.
• Experience integrating enterprise applications and SaaS platforms using federation standards.
• Proven ability to manage complex technical deployments involving multiple stakeholders.
• Eligible to work in the United States.

Strong experience in:

• SAML 2.0
• OpenID Connect (OIDC)
• OAuth 2.0
• SCIM
• Active Directory
• LDAP
• MFA and Passwordless Authentication
• PKI and Certificate Management
• REST APIs
• JSON and XML

Experience with one or more:

• Microsoft Entra
• Ping Identity Ping Federate
• Okta
• Forge Rock
• Sail Point
• Cyber Ark

Programming/Scripting experience:

• Python
• Power Shell
• Java Script
• Bash

• Competitive salary of 160000 USD/year, with equity or other long-term upside appropriate to the role and company stage.
• Medical, dental, and vision coverage, FSA/HSA options, 401(k), and additional employee benefits.
• Equipment budget and a customized workstation for the tools needed to do the job.
• Hybrid work model with remote flexibility, anchored by in-person collaboration at our Edison, New Jersey headquarters.
• Direct exposure to enterprise customers, product leadership, strategic partners, and a fast-moving identity-security market.