I guess you could compare the face with the Identity you have on file when the employee joined.