Senior Implementation Engineer

Are you ready to shape the future of authentication? Join 1Kosmos and help lead the next wave in identity assurance and passwordless innovation.

1Kosmos is driving the future of identity security, empowering organizations to eliminate passwords and establish trust at every step of the identity lifecycle. As a vibrant team of innovators, we develop advanced authentication solutions trusted by some of the world’s leading brands. Join us as we create a passwordless world and set new standards for digital identity assurance.

Your Title: Senior Implementation Engineer

Your Location: Remote/Anywhere within the US

You Report to: VP, Customer Success

Compensation: $160,000 or more depending upon experience

1Komos is looking for a Senior Implementation Engineer to join our growing Customer Success team! You'd be the technical lead on deployments that put phishing-resistant authentication into production for some of the largest organizations, designing SSO and federation architecture across Entra ID, Okta, PingFederate, and ForgeRock, and deploying passwordless authentication into VPNs, VDI, and frontline workforce environments. This is hands-on work across protocols, infrastructure, and code, with Python, PowerShell, and JavaScript in play whenever standard configuration isn't enough. If you want to see your work running in production at enterprise scale, this is the role.

What you will own:

Customer Implementation & Delivery

• Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sector customers.
• Conduct discovery workshops, architecture reviews, and technical design sessions.
• Develop implementation plans, migration strategies, and deployment runbooks.
• Serve as the primary technical lead during customer onboarding and production rollouts.
• Manage multiple customer implementations simultaneously while ensuring delivery excellence.

SSO & Federation Integration

• Design and implement Single Sign-On (SSO) integrations using SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, and WS-Federation.
• Integrate 1Kosmos with enterprise Identity Providers including Microsoft Entra ID, PingFederate, Okta, ADFS, ForgeRock, and custom Identity Providers.
• Configure federation trust relationships, claims mappings, authentication policies, and user provisioning workflows.
• Troubleshoot authentication failures, token issues, certificate problems, and federation-related incidents.

Passwordless & Identity Verification

• Deploy passwordless authentication solutions utilizing FIDO2, Passkeys, WebAuthn, mobile-based authentication, and certificate-based authentication.
• Implement identity proofing and verification workflows.
• Design phishing-resistant authentication architectures aligned with Zero Trust principles.
• Integrate passwordless authentication into VPNs, VDI environments, workforce applications, and customer-facing applications.

Enterprise Infrastructure Integration

• Integrate with Active Directory, LDAP, Microsoft Entra ID, HR systems, SIEM platforms, and MFA solutions.
• Deploy and support 1Kosmos components.
• Support hybrid, multi-cloud, and on-premises deployment models.

Automation & Development

• Develop automation scripts and integration tools using Python, PowerShell, and JavaScript.
• Build and troubleshoot REST API integrations.
• Create deployment automation and operational tooling.
• Assist customers with custom integrations and identity workflows.

Customer Success & Escalation Support

• Act as a trusted technical advisor for customer IAM and authentication initiatives.
• Mentor customer teams on best practices for passwordless authentication adoption.
• Support escalated technical issues and complex production environments.
• Collaborate with Product, Engineering, Support, and Customer Success teams to resolve customer challenges.
• Provide implementation feedback to influence product roadmap and feature enhancements.

What you Bring:

• 5+ years of hands-on IAM, SSO, or Federation implementation experience.
• 5+ years implementing enterprise authentication and access management solutions.
• Experience leading customer-facing technical implementations.
• Experience integrating enterprise applications and SaaS platforms using federation standards.
• Proven ability to manage complex technical deployments involving multiple stakeholders.
• Eligible to work in the United States.

Technical Expertise

Strong experience in:

• SAML 2.0
• OpenID Connect (OIDC)
• OAuth 2.0
• SCIM
• Active Directory
• LDAP
• MFA and Passwordless Authentication
• PKI and Certificate Management
• REST APIs
• JSON and XML

Experience with one or more:

• Microsoft Entra ID
• Ping Identity PingFederate
• Okta
• ForgeRock
• SailPoint
• CyberArk

Programming/Scripting experience:

• Python
• PowerShell
• JavaScript
• Bash

• Competitive salary of 160000 USD/year, with equity or other long-term upside appropriate to the role and company stage.

• Medical, dental, and vision coverage, FSA/HSA options, 401(k), and additional employee benefits.

• Equipment budget and a customized workstation for the tools needed to do the job.

• Hybrid work model with remote flexibility, anchored by in-person collaboration at our Edison, New Jersey headquarters.

• Direct exposure to enterprise customers, product leadership, strategic partners, and a fast-moving identity-security market.