Senior Implementation Engineer

We are seeking a highly motivated and customer-facing Senior Implementation Engineer to join

our Professional Services and Customer Success organization. This role will lead the deployment

and integration of the 1Kosmos passwordless authentication and identity verification platform

across enterprise customers.

The ideal candidate possesses deep expertise in SSO, federation, modern authentication

protocols, identity architecture, and enterprise application integrations. The candidate should be

comfortable working directly with customer architects, security teams, infrastructure teams, and

executive stakeholders while driving successful implementations from design through production

deployment.

This is a hands-on technical role requiring a blend of IAM expertise, implementation consulting,

troubleshooting, automation, and customer engagement skills.

• Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sector

customers.

• Conduct discovery workshops, architecture reviews, and technical design sessions.

• Develop implementation plans, migration strategies, and deployment runbooks.

• Serve as the primary technical lead during customer onboarding and production rollouts.

• Manage multiple customer implementations simultaneously while ensuring delivery

excellence.

• Design and implement Single Sign-On (SSO) integrations using:
• SAML 2.0
• OpenID Connect (OIDC)
• OAuth 2.0
• WS-Federation

• Integrate 1Kosmos with enterprise Identity Providers including:
• Microsoft Entra ID
• PingFederate
• Okta
• ADFS
• ForgeRock
• Custom Identity Providers

• Configure federation trust relationships, claims mappings, authentication policies, and

user provisioning workflows.

• Troubleshoot authentication failures, token issues, certificate problems, and federation-

related incidents.

• Deploy passwordless authentication solutions utilizing:
• FIDO2
• Passkeys
• WebAuthn
• Mobile-based authentication
• Certificate-based authentication
• Implement identity proofing and verification workflows
• Design phishing-resistant authentication architectures aligned with Zero Trust principles.
• Integrate passwordless authentication into VPNs, VDI environments, workforce

applications, and customer-facing applications.

• Integrate with:
• Active Directory
• LDAP
• Microsoft Entra ID
• HR systems
• SIEM platforms
• MFA solutions
• Deploy and support 1Kosmos components
• Support hybrid, multi-cloud, and on-premises deployment models

• Develop automation scripts and integration tools using:
• Python
• PowerShell
• JavaScript

• Build and troubleshoot REST API integrations.

• Create deployment automation and operational tooling.

• Assist customers with custom integrations and identity workflows.

• Act as a trusted technical advisor for customer IAM and authentication initiatives.
• Mentor customer teams on best practices for passwordless authentication adoption.
• Support escalated technical issues and complex production environments.
• Collaborate with Product, Engineering, Support, and Customer Success teams to resolve

customer challenges

• Provide implementation feedback to influence product roadmap and feature

enhancements

- 9+ years of hands-on IAM, SSO, or Federation implementation experience.

- 5+ years implementing enterprise authentication and access management solutions.

- Experience leading customer-facing technical implementations.

- Experience integrating enterprise applications and SaaS platforms using federation

standards.

- Proven ability to manage complex technical deployments involving multiple

stakeholders.

Strong experience in:

 SAML 2.0

 OpenID Connect (OIDC)

 OAuth 2.0

 SCIM

 Active Directory

 LDAP

 Microsoft Entra ID

 MFA and Passwordless Authentication

 PKI and Certificate Management

 REST APIs

 JSON and XML

Experience with one or more:

 Microsoft Entra ID

 Ping Identity PingFederate

 Okta

 ForgeRock

 SailPoint

 CyberArk

Programming/Scripting experience:

 Python

 PowerShell

 JavaScript

 Bash

Within the first 12 months, the successful candidate will:

 Lead successful deployments of 1Kosmos across enterprise customers.

 Deliver seamless SSO integrations for critical business applications.

 Enable customers to transition from legacy MFA solutions to phishing-resistant

passwordless authentication.

 Become a trusted technical advisor for customer IAM and authentication strategies.

 Consistently achieve high customer satisfaction scores and successful production go-

lives.

Flexible Hybrid Work Model

Medical / Dental / Vision / 401k