Are you ready to shape the future of authentication? Join 1Kosmos and help lead the next wave in identity assurance and passwordless innovation.
1Kosmos is driving the future of identity security, empowering organizations to eliminate passwords and establish trust at every step of the identity lifecycle. As a vibrant team of innovators, we develop advanced authentication solutions trusted by some of the world’s leading brands. Join us as we create a passwordless world and set new standards for digital identity assurance.
Your Title: Senior Implementation Engineer
Your Location: Remote/Anywhere within the US
You Report to: VP, Customer Success
Compensation: $160,000 or more depending upon experience
1Komos is looking for a Senior Implementation Engineer to join our growing Customer Success team! You'd be the technical lead on deployments that put phishing-resistant authentication into production for some of the largest organizations, designing SSO and federation architecture across Entra ID, Okta, PingFederate, and ForgeRock, and deploying passwordless authentication into VPNs, VDI, and frontline workforce environments. This is hands-on work across protocols, infrastructure, and code, with Python, PowerShell, and JavaScript in play whenever standard configuration isn't enough. If you want to see your work running in production at enterprise scale, this is the role.
What you will own:
Customer Implementation & Delivery
- Lead end-to-end deployment of 1Kosmos solutions for enterprise and public-sector customers.
- Conduct discovery workshops, architecture reviews, and technical design sessions.
- Develop implementation plans, migration strategies, and deployment runbooks.
- Serve as the primary technical lead during customer onboarding and production rollouts.
- Manage multiple customer implementations simultaneously while ensuring delivery excellence.
SSO & Federation Integration
- Design and implement Single Sign-On (SSO) integrations using SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, and WS-Federation.
- Integrate 1Kosmos with enterprise Identity Providers including Microsoft Entra ID, PingFederate, Okta, ADFS, ForgeRock, and custom Identity Providers.
- Configure federation trust relationships, claims mappings, authentication policies, and user provisioning workflows.
- Troubleshoot authentication failures, token issues, certificate problems, and federation-related incidents.
Passwordless & Identity Verification
- Deploy passwordless authentication solutions utilizing FIDO2, Passkeys, WebAuthn, mobile-based authentication, and certificate-based authentication.
- Implement identity proofing and verification workflows.
- Design phishing-resistant authentication architectures aligned with Zero Trust principles.
- Integrate passwordless authentication into VPNs, VDI environments, workforce applications, and customer-facing applications.
Enterprise Infrastructure Integration
- Integrate with Active Directory, LDAP, Microsoft Entra ID, HR systems, SIEM platforms, and MFA solutions.
- Deploy and support 1Kosmos components.
- Support hybrid, multi-cloud, and on-premises deployment models.
Automation & Development
- Develop automation scripts and integration tools using Python, PowerShell, and JavaScript.
- Build and troubleshoot REST API integrations.
- Create deployment automation and operational tooling.
- Assist customers with custom integrations and identity workflows.
Customer Success & Escalation Support
- Act as a trusted technical advisor for customer IAM and authentication initiatives.
- Mentor customer teams on best practices for passwordless authentication adoption.
- Support escalated technical issues and complex production environments.
- Collaborate with Product, Engineering, Support, and Customer Success teams to resolve customer challenges.
- Provide implementation feedback to influence product roadmap and feature enhancements.
Requirements
What you Bring:
- 5+ years of hands-on IAM, SSO, or Federation implementation experience.
- 5+ years implementing enterprise authentication and access management solutions.
- Experience leading customer-facing technical implementations.
- Experience integrating enterprise applications and SaaS platforms using federation standards.
- Proven ability to manage complex technical deployments involving multiple stakeholders.
- Eligible to work in the United States.
Technical Expertise
Strong experience in:
- SAML 2.0
- OpenID Connect (OIDC)
- OAuth 2.0
- SCIM
- Active Directory
- LDAP
- MFA and Passwordless Authentication
- PKI and Certificate Management
- REST APIs
- JSON and XML
Experience with one or more:
- Microsoft Entra ID
- Ping Identity PingFederate
- Okta
- ForgeRock
- SailPoint
- CyberArk
Programming/Scripting experience:
- Python
- PowerShell
- JavaScript
- Bash
Benefits
• Competitive salary of 160000 USD/year, with equity or other long-term upside appropriate to the role and company stage.
• Medical, dental, and vision coverage, FSA/HSA options, 401(k), and additional employee benefits.
• Equipment budget and a customized workstation for the tools needed to do the job.
• Hybrid work model with remote flexibility, anchored by in-person collaboration at our Edison, New Jersey headquarters.
• Direct exposure to enterprise customers, product leadership, strategic partners, and a fast-moving identity-security market.
Similar Jobs
What you need to know about the Los Angeles Tech Scene
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
