Senior Implementation Engineer

We are seeking a highly motivated and customer-facing Senior Implementation Engineer to joinour Professional Services and Customer Success organization. This role will lead the deploymentand integration of the 1Kosmos passwordless authentication and identity verification platformacross enterprise customers.The ideal candidate possesses deep expertise in SSO, federation, modern authenticationprotocols, identity architecture, and enterprise application integrations. The candidate should becomfortable working directly with customer architects, security teams, infrastructure teams, andexecutive stakeholders while driving successful implementations from design through productiondeployment.This is a hands-on technical role requiring a blend of IAM expertise, implementation consulting,troubleshooting, automation, and customer engagement skills.RequirementsKey Responsibilities:Customer Implementation & Delivery -Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sectorcustomers.Conduct discovery workshops, architecture reviews, and technical design sessions.Develop implementation plans, migration strategies, and deployment runbooks.Serve as the primary technical lead during customer onboarding and production rollouts.Manage multiple customer implementations simultaneously while ensuring deliveryexcellence.SSO & Federation Integration -Design and implement Single Sign-On (SSO) integrations using:SAML 2.0OpenID Connect (OIDC)OAuth 2.0WS-FederationIntegrate 1Kosmos with enterprise Identity Providers including:Microsoft Entra IDPingFederateOktaADFSForgeRockCustom Identity ProvidersConfigure federation trust relationships, claims mappings, authentication policies, anduser provisioning workflows.Troubleshoot authentication failures, token issues, certificate problems, and federation-related incidents.Passwordless & Identity Verification - Deploy passwordless authentication solutions utilizing:FIDO2PasskeysWebAuthnMobile-based authenticationCertificate-based authenticationImplement identity proofing and verification workflowsDesign phishing-resistant authentication architectures aligned with Zero Trust principles.Integrate passwordless authentication into VPNs, VDI environments, workforceapplications, and customer-facing applications.Enterprise Infrastructure Integration - Integrate with:Active DirectoryLDAPMicrosoft Entra IDHR systemsSIEM platformsMFA solutionsDeploy and support 1Kosmos componentsSupport hybrid, multi-cloud, and on-premises deployment modelsAutomation & Development - Develop automation scripts and integration tools using:PythonPowerShellJavaScriptBuild and troubleshoot REST API integrations.Create deployment automation and operational tooling.Assist customers with custom integrations and identity workflows.Customer Success & Escalation Support - Act as a trusted technical advisor for customer IAM and authentication initiatives.Mentor customer teams on best practices for passwordless authentication adoption.Support escalated technical issues and complex production environments.Collaborate with Product, Engineering, Support, and Customer Success teams to resolvecustomer challengesProvide implementation feedback to influence product roadmap and featureenhancementsRequired QualificationsExperience - - 9+ years of hands-on IAM, SSO, or Federation implementation experience.- 5+ years implementing enterprise authentication and access management solutions.- Experience leading customer-facing technical implementations.- Experience integrating enterprise applications and SaaS platforms using federationstandards.- Proven ability to manage complex technical deployments involving multiplestakeholders.Technical ExpertiseStrong experience in: SAML 2.0 OpenID Connect (OIDC) OAuth 2.0 SCIM Active Directory LDAP Microsoft Entra ID MFA and Passwordless Authentication PKI and Certificate Management REST APIs JSON and XMLExperience with one or more: Microsoft Entra ID Ping Identity PingFederate Okta ForgeRock SailPoint CyberArkProgramming/Scripting experience: Python PowerShell JavaScript BashWhat Success Looks Like...Within the first 12 months, the successful candidate will: Lead successful deployments of 1Kosmos across enterprise customers. Deliver seamless SSO integrations for critical business applications. Enable customers to transition from legacy MFA solutions to phishing-resistantpasswordless authentication. Become a trusted technical advisor for customer IAM and authentication strategies. Consistently achieve high customer satisfaction scores and successful production go-lives.BenefitsFlexible Hybrid Work ModelMedical / Dental / Vision / 401k

We are seeking a highly motivated and customer-facing Senior Implementation Engineer to join

our Professional Services and Customer Success organization. This role will lead the deployment

and integration of the 1Kosmos passwordless authentication and identity verification platform

across enterprise customers.

The ideal candidate possesses deep expertise in SSO, federation, modern authentication

protocols, identity architecture, and enterprise application integrations. The candidate should be

comfortable working directly with customer architects, security teams, infrastructure teams, and

executive stakeholders while driving successful implementations from design through production

deployment.

This is a hands-on technical role requiring a blend of IAM expertise, implementation consulting,

troubleshooting, automation, and customer engagement skills.

Requirements

Key Responsibilities:

Customer Implementation & Delivery -

• Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sector

customers.

• Conduct discovery workshops, architecture reviews, and technical design sessions.

• Develop implementation plans, migration strategies, and deployment runbooks.

• Serve as the primary technical lead during customer onboarding and production rollouts.

• Manage multiple customer implementations simultaneously while ensuring delivery

excellence.

SSO & Federation Integration -

• Design and implement Single Sign-On (SSO) integrations using:
• SAML 2.0
• OpenID Connect (OIDC)
• OAuth 2.0
• WS-Federation

• Integrate 1Kosmos with enterprise Identity Providers including:
• Microsoft Entra ID
• PingFederate
• Okta
• ADFS
• ForgeRock
• Custom Identity Providers

• Configure federation trust relationships, claims mappings, authentication policies, and

user provisioning workflows.

• Troubleshoot authentication failures, token issues, certificate problems, and federation-

related incidents.

Passwordless & Identity Verification -

• Deploy passwordless authentication solutions utilizing:
• FIDO2
• Passkeys
• WebAuthn
• Mobile-based authentication
• Certificate-based authentication
• Implement identity proofing and verification workflows
• Design phishing-resistant authentication architectures aligned with Zero Trust principles.
• Integrate passwordless authentication into VPNs, VDI environments, workforce

applications, and customer-facing applications.

Enterprise Infrastructure Integration -

• Integrate with:
• Active Directory
• LDAP
• Microsoft Entra ID
• HR systems
• SIEM platforms
• MFA solutions
• Deploy and support 1Kosmos components
• Support hybrid, multi-cloud, and on-premises deployment models

Automation & Development -

• Develop automation scripts and integration tools using:
• Python
• PowerShell
• JavaScript

• Build and troubleshoot REST API integrations.

• Create deployment automation and operational tooling.

• Assist customers with custom integrations and identity workflows.

Customer Success & Escalation Support -

• Act as a trusted technical advisor for customer IAM and authentication initiatives.
• Mentor customer teams on best practices for passwordless authentication adoption.
• Support escalated technical issues and complex production environments.
• Collaborate with Product, Engineering, Support, and Customer Success teams to resolve

customer challenges

• Provide implementation feedback to influence product roadmap and feature

enhancements

Required Qualifications

Experience -

- 9+ years of hands-on IAM, SSO, or Federation implementation experience.

- 5+ years implementing enterprise authentication and access management solutions.

- Experience leading customer-facing technical implementations.

- Experience integrating enterprise applications and SaaS platforms using federation

standards.

- Proven ability to manage complex technical deployments involving multiple

stakeholders.

Technical Expertise

Strong experience in:

 SAML 2.0

 OpenID Connect (OIDC)

 OAuth 2.0

 SCIM

 Active Directory

 LDAP

 Microsoft Entra ID

 MFA and Passwordless Authentication

 PKI and Certificate Management

 REST APIs

 JSON and XML

Experience with one or more:

 Microsoft Entra ID

 Ping Identity PingFederate

 Okta

 ForgeRock

 SailPoint

 CyberArk

Programming/Scripting experience:

 Python

 PowerShell

 JavaScript

 Bash

What Success Looks Like...

Within the first 12 months, the successful candidate will:

 Lead successful deployments of 1Kosmos across enterprise customers.

 Deliver seamless SSO integrations for critical business applications.

 Enable customers to transition from legacy MFA solutions to phishing-resistant

passwordless authentication.

 Become a trusted technical advisor for customer IAM and authentication strategies.

 Consistently achieve high customer satisfaction scores and successful production go-

lives.

Benefits

Flexible Hybrid Work Model

Medical / Dental / Vision / 401k

Our mission is to provide individuals with a secure digital identity that provides control of their credentials and enables service providers to use it with consent to fight identity fraud, securing online services from password-based attacks with a next generation approach to multi-factor authentication that delivers a frictionless user experience.

Our mission is to provide individuals with a secure digital identity that provides control of their credentials and enables service providers to use it with consent to fight identity fraud, securing online services from password-based attacks with a next generation approach to multi-factor authentication that delivers a frictionless user experience.