About the role
Riot Platforms is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments. This role will be hands-on and highly technical, with responsibility for building secure, scalable, and automated identity solutions that support Riot’s continued growth into AI/HPC and data center operations.
The Senior IAM Engineer will work closely with Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC.
This is a remote position with travel to Riot sites as needed.
What you'll do
- Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.
- Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
- Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
- Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
- Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
- Engineer secure access for vendors, contractors, partners, and other third-party users.
- Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities.
- Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
- Troubleshoot authentication, authorization, provisioning, and federation issues.
- Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation.
- Maintain technical documentation, architecture diagrams, standards, and operating procedures.
- Support IAM-related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
- Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.
What you'll bring
- 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
- Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory.
- Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
- Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.
- Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management.
- Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools.
- Strong troubleshooting skills across identity, networking, federation, and application integrations.
- Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams.
- Preferred experience with CyberArk or comparable privilege management technologies.
- Preferred experience with SailPoint or comparable entitlements management technologies.
- Preferred experience supporting cloud, data center, critical infrastructure, or AI/HPC environments.
- Preferred experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures.
- Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent.
Compensation and Benefits
- Competitive Salary: $160,000-$175,000 (commensurate with experience) + bonus + sign-on equity grant.
- Long-Term Growth: Eligible to participate in Riot’s equity incentive programs and share in the success you help build.
- 401(k) Retirement Plan: Incudes a generous company match.
- Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans.
- Wellness & Lifestyle Perks: Enjoy free gym memberships, pet insurance, childcare discounts, and more to support your life both in and out of work.
- Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.
Job description provided by Riot Platforms.
View the original posting