Director, Identity & Access Management (IAM)

Riot Platforms, Inc.; United States; Remote; USD 180,000 - 200,000; Full time

Benefits offered by this job

Bonus program

Sign-on equity grant

401(k) company match

Health coverage

Wellness benefits

Job summary

Riot Platforms, Inc. is seeking a Director of Identity & Access Management (IAM) to lead the strategy, architecture, engineering, and operations of our enterprise IAM program.

This remote role reports into Cybersecurity and collaborates with IT, Infrastructure, Cloud, Data Center Operations, People Operations, GRC, and business leaders. The role emphasizes Zero Trust, least privilege, strong authentication, PAM, IGA, and automation across hybrid environments.

Qualifications

• 10+ years of cybersecurity, IAM, or related experience with leadership responsibility.
• Demonstrated experience building or transforming an enterprise IAM program.
• Strong understanding of Zero Trust, least privilege, identity governance, PAM, authentication, authorization, and identity lifecycle management.

Responsibilities

• Develop and execute Riot’s enterprise IAM strategy and roadmap across workforce, privileged, third-party, and non-human identities.
• Own the architecture and security of Microsoft Entra ID, including SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
• Mature Riot’s Privileged Access Management (PAM) program and reduce standing administrative privileges.
• Establish scalable Identity Governance and Administration (IGA) for joiner/mover/leaver, access reviews, entitlement management, and segregation of duties.
• Implement least privilege and role-based access across enterprise, cloud, SaaS, and data center environments.
• Develop governance for service accounts, API identities, machine identities, certificates, secrets, and other non-human identities.
• Establish secure and repeatable processes for vendors, contractors, partners, and third-party access.
• Increase IAM automation and reduce manual provisioning and approval delays.
• Define IAM standards, architecture patterns, controls, and security requirements for new tech.
• Partner with Cybersecurity Operations to detect identity-based attacks and credential compromise.

Skills

Zero Trust

Least privilege

Identity governance

Privileged access management

Authentication & MFA

Cloud & on-prem

Leadership

Communication

Risk assessment

Education

CISSP

CISM

CCSP

Microsoft Identity certification

Tools

Microsoft Entra ID

Job description

About the role

Riot Platforms is seeking a Director of Identity & Access Management (IAM) to lead the strategy, architecture, engineering, and operations of our enterprise identity security program.

As Riot continues its evolution toward large-scale AI/HPC and data center operations, identity will be a foundational security control across our corporate, cloud, data center, and operational environments. This leader will be responsible for establishing a modern, scalable IAM program centered on Zero Trust, least privilege, strong authentication, privileged access management, identity governance, and automation.

The Director of IAM will report into Cybersecurity and partner closely with IT, Infrastructure, Cloud, Data Center Operations, People Operations, GRC, and business leaders.

This is a remote position with travel to Riot sites as needed.

What you’ll be doing

• Develop and execute Riot’s enterprise IAM strategy and roadmap across workforce, privileged, third-party, and non-human identities.
• Own the architecture and security of Microsoft Entra ID , including SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
• Mature Riot’s Privileged Access Management (PAM) program and eliminate unnecessary standing administrative privileges.
• Establish scalable Identity Governance and Administration (IGA) capabilities for joiner/mover/leaver processes, access reviews, entitlement management, and segregation of duties.
• Implement least privilege and role-based access models across enterprise, cloud, SaaS, and data center environments.
• Develop governance for service accounts, API identities, machine identities, certificates, secrets, and other non-human identities.
• Establish secure and repeatable processes for vendors, contractors, partners, and other third-party access.
• Increase IAM automation and reduce manual provisioning, approval delays, and unnecessary user friction.
• Define IAM standards, architecture patterns, controls, and security requirements for new technology implementations.
• Partner with Cybersecurity Operations to detect and respond to identity-based attacks, credential compromise, privilege escalation, and anomalous authentication activity.
• Define measurable IAM KPIs and KRIs and regularly communicate program maturity, risks, and progress to leadership.
• Ensure IAM controls support Riot’s SOX, SOC 2 and ISO 27001, regulatory, audit, and broader security requirements.
• Lead IAM engineers and partners while developing the talent and capabilities needed as Riot’s environment grows.

What you’ll have

• 10+ years of cybersecurity, IAM, infrastructure security, or related experience, including significant leadership responsibility.
• Demonstrated experience building or materially transforming an enterprise IAM program.
• Strong understanding of Zero Trust, least privilege, identity governance, PAM, authentication, authorization, and identity lifecycle management.
• Experience securing hybrid environments spanning on-premises infrastructure, cloud platforms, SaaS applications, and modern data center environments.
• Ability to translate identity risks and complex technical issues into clear business decisions.
• Strong experience partnering across Cybersecurity, IT, HR/People Operations, GRC, Infrastructure, and business teams.
• Demonstrated ability to balance security, operational efficiency, and user experience.
• Preferred experience supporting data centers, critical infrastructure, AI/HPC, or OT environments.
• Preferred experience implementing identity automation at enterprise scale.
• Preferred familiarity with SOX, SOC 2, ISO, NIST CSF, Zero Trust architecture, and related control frameworks.
• Preferred experience designing identity controls for cloud workloads and non-human identities.
• Certifications such as CISSP, CISM, CCSP, Microsoft Identity, highly preferred.

Compensation and Benefits

• Competitive Salary: $180,000-$200,000 base salary (commensuratewith experience) + bonus + sign-on equity grant.
• Long-Term Growth: Eligible toparticipatein Riot’s equity incentive programs and share in the success you help build.
• 401(k) Retirement Plan: Incudes a generous company match.
• Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans.
• Wellness & Lifestyle Perks: Enjoy free gymmemberships, pet insurance, childcare discounts, and more to support your life both in and out of work.

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.