技术研究顾问,身份验证
Technical Research Consultant, Identity Verification
摘要:理想的候选人需要从身份验证概念快速转向证据。找到合适的供应商和数据源,进行实际测试,记录市场和监管限制,并为产品提供有工作原型和可追溯研究支持的明确建议。
为什么选择1Kosmos?
1Kosmos构建的身份验证和认证技术被企业及政府组织使用。我们的身份验证产品涵盖实体身份文件、电子身份证、权威数据源、生物识别、欺诈信号和可重复使用的已验证身份。
市场不断变化。政府会发布新的身份文件和数字ID,供应商会增加或停用API,欺诈技术也在演变,而地区规则决定了技术上可行的集成是否能在生产环境中使用。我们需要一位技术能力强的研究人员,能够跟上这些变化并将其转化为产品决策。
关于这次合作
这是一次为期三到六个月的咨询合作,将嵌入到身份验证产品团队中。您将调查供应商,集成和测试API,构建轻量级原型,评估市场和监管限制,并留下可复用的研究系统,而非一次性报告。
该职位为远程办公。需要与美国东部时区有可靠的重叠时间,以便与产品团队协作。
您将负责的工作
供应商和数据源研究
- 识别可以满足特定产品需求的身份验证、权威数据、eID、文件验证、生物识别、活体检测、深度伪造、欺诈信号、银行验证等相关供应商。
- 研究全球供应商覆盖较弱的地区选项,近期重点关注东南亚及其他优先的国际区域。
- 确定供应商在技术上是否可用且在操作上是否可行,包括生产资格、注册要求、按客户审批、地理限制、许可、最低要求和商业依赖性。
- 通过原始来源、技术文档、独立基准测试、公开测试结果、标准和实际验证,区分供应商声明与已验证证据。
实际API评估和原型开发
- 在沙箱或测试环境中使用轻量级Python、JavaScript/TypeScript、Postman、curl或其他类似工具集成第三方REST API和SDK。
- 构建小型的概念验证
查看英文原文
Summary: The ideal candidate must move quickly from an identity-verification concept to evidence. Find the right providers and data sources, test them hands-on, document market and regulatory constraints, and give Product clear recommendations backed by working prototypes and traceable research.
Why 1Kosmos?
1Kosmos builds identity verification and authentication technology used by enterprises and government organizations. Our Identity Verification product spans physical identity documents, electronic IDs, authoritative data sources, biometrics, fraud signals, and reusable verified identity.
The market changes constantly. Governments release new identity documents and digital IDs, vendors add or retire APIs, fraud techniques evolve, and regional rules determine whether a technically viable integration can actually be used in production. We need a technically capable researcher who can keep pace with those changes and turn them into product decisions.
About the Engagement
This is a three-to-six month consulting engagement embedded with the Identity Verification Product team. You will investigate providers, integrate and test APIs, build lightweight prototypes, evaluate market and regulatory constraints, and leave behind reusable research systems rather than one-off reports.
The role is remote. Reliable overlap with the U.S. Eastern time zone for Product-team collaboration is required.
What You Will Do
Provider and Data-Source Research
- Identify identity-verification, authoritative-data, eID, document-verification, biometric, liveness, deepfake, fraud-signal, bank-verification, and related providers that can fill specific product requirements.
- Research regional options where global vendors may have weak coverage, with near-term emphasis on markets such as Southeast Asia and other priority international regions.
- Determine whether a provider is technically available and operationally usable, including production eligibility, onboarding requirements, per-customer approvals, geographic restrictions, licensing, minimums, and commercial dependencies.
- Separate vendor claims from verified evidence by using primary sources, technical documentation, independent benchmarks, public test results, standards, and hands-on validation.
Hands-On API Evaluation and Prototyping
- Integrate third-party REST APIs and SDKs in a sandbox or test environment using lightweight Python, JavaScript/TypeScript, Postman, curl, or similar tools.
- Build small proof-of-concept applications or test harnesses that demonstrate what a provider actually returns, how difficult it is to integrate, and where failure modes appear.
- Evaluate API authentication, request/response structure, error handling, webhooks, latency, rate limits, sandbox-to-production differences, observability, documentation quality, and integration effort.
- Prototype fraud and biometric concepts when useful, such as connecting a deepfake-detection API and comparing its results against public or independently available test data.
- Document enough implementation detail that Product or Engineering can reproduce the test without starting over.
Country, Regulatory, and Operational Research
- Research how identity verification works in specific countries, including available government eIDs, authoritative sources, physical documents, identity attributes, and approved access models.
- Translate business requests into technical and vendor-evaluation criteria. Example: a request to support Singpass should become a documented view of integration options, approval requirements, entity prerequisites, production constraints, data flows, and implementation choices.
- Identify privacy, consent, data-residency, retention, licensing, certification, and local-government constraints that could affect architecture or time to market.
- Flag operational dependencies early, including manual-review requirements, provider onboarding lead times, customer-specific approvals, or compliance reassessment implications.
Coverage Intelligence and Change Monitoring
- Maintain a structured view of provider coverage by country, document type, electronic ID, authoritative source, and capability.
- Track new or changed identity-document templates and provider support so Product can anticipate verification failures rather than discover them only through customer escalations.
- Monitor vendor release notes, government identity programs, standards, API changes, and relevant product announcements, recording both the source and effective date.
- Create concise periodic updates that tell Product what changed, why it matters, and whether action is required.
Research Automation and Agents
- Build lightweight research agents or automated workflows that monitor defined sources, detect changes, preserve citations, and produce reviewable summaries.
- Automate repetitive research tasks such as checking supported-document lists, comparing vendor coverage, identifying newly released document templates, or watching government digital-ID programs.
- Design workflows so a human can verify the source and reasoning before research is used for a product or compliance decision.
Decision Support for Product
- Create a repeatable vendor scorecard covering coverage, technical fit, evidence quality, integration complexity, fraud controls, operational model, regulatory constraints, data handling, commercial considerations, scalability, and vendor maturity.
- Recommend whether 1Kosmos should integrate, partner, defer, or continue researching, and clearly state the evidence and assumptions behind the recommendation.
- Present findings in concise written briefs and working sessions with Product, Engineering, Security/Compliance, and other stakeholders.
- Maintain a research repository so prior work can be reused for roadmap planning, customer requirements, RFPs, and future vendor evaluations.
Example Initial Research Queue
Priorities will change during the engagement, but representative assignments include:
- Evaluate bank-account and identity-data providers such as Plaid for verification use cases and determine the most appropriate integration pattern.
- Identify and test document-verification and authoritative-source providers for Southeast Asian markets.
- Research Singpass and other national eID programs, including production approval requirements and customer-specific constraints.
- Evaluate eID and mobile-ID aggregation options and determine where direct government integrations versus aggregators make sense.
- Compare DMV/AAMVA-like authoritative-source options and third-party aggregators for U.S. identity verification.
- Prototype and evaluate deepfake or biometric fraud-detection providers, including tools such as Paravision or comparable specialist vendors.
- Build a repeatable process for detecting new identity-document templates and tracking when upstream providers add support.
Requirements
You Are the Right Person for This Engagement If You Have
- Strong hands-on experience consuming third-party APIs and SDKs. You can go from documentation to a working test without needing a full engineering team.
- Comfort with Python, JavaScript/TypeScript, or a similar scripting language, plus REST/JSON, OAuth or API-key authentication, Postman, curl, Git, and basic cloud tooling.
- Excellent technical research skills and the discipline to distinguish primary evidence, independent testing, vendor marketing claims, and your own conclusions.
- Experience translating ambiguous business questions into structured evaluation criteria and defensible recommendations.
- Strong written communication. Your research should be concise enough for an executive while detailed enough for an engineer to reproduce the work.
- Experience presenting technical findings to Product, walking Engineering through API test results, and discussing regulatory constraints with Security or Compliance.
- High agency and comfort working independently in an environment where priorities can change quickly.
- Dependable collaboration overlap with the U.S. Eastern time zone.
- Experience in identity verification, KYC/KYB, fraud prevention, biometrics, digital identity, cybersecurity, fintech, payments, or trust and safety.
Additional Pluses
- Familiarity with government eID programs, mobile driver licenses, authoritative identity data, document verification, or identity-assurance standards.
- Experience evaluating biometric, liveness, presentation-attack, deepfake, or document-fraud technology.
- Experience researching international privacy, data-residency, consent, identity, or digital-government requirements.
- Experience building AI-assisted research agents, monitoring pipelines, web-scraping or change-detection workflows, or other research automation.
- Prior work in consulting, product management, solutions engineering, technical product research, or technical competitive intelligence.
Originally posted on Himalayas