Senior Engineer, Identity & Access Management (IAM)

Riot Platforms; Austin (TX); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

401(k) Retirement Plan

Health Coverage

Gym membership

Pet insurance

Childcare discounts

Sign-on equity grant

Job summary

Riot Platforms in Austin, TX seeks a Senior IAM Engineer to design, implement, and operate secure identity solutions across enterprise, cloud, and data center environments.

You will own SSO, PAM, MFA, and identity governance, collaborating with Cybersecurity, IT, Cloud, and Data Center teams to strengthen security and streamline access management. Relocation assistance is available for non-local candidates.

Qualifications

• Must have hands-on IAM and cybersecurity engineering experience.
• Experience with Microsoft identity technologies, Entra ID, and AD.
• Experience enabling SSO and automated provisioning across apps.
• Familiarity with PAM, PIM, CA, MFA, and access governance.

Responsibilities

• Design, implement, and operate IAM solutions across enterprise, cloud, and data centers.
• Manage SSO, Conditional Access, MFA, and identity lifecycle controls.
• Implement Privileged Access Management capabilities and session controls.
• Support IGA processes including joiner/mover/leaver workflows and access reviews.
• Automate user provisioning using PowerShell, APIs, and scripting.
• Secure access for vendors, contractors, and third-party users.
• Develop controls for service accounts, API access, and non-human identities.
• Integrate apps with SSO using SAML, OAuth 2.0, and OIDC.
• Troubleshoot authentication, authorization, provisioning, and federation issues.
• Work with Cybersecurity Operations on identity threats and privileged escalation.
• Maintain architecture diagrams, standards, and operating procedures.

Skills

IAM

Microsoft Entra ID

Active Directory

SSO

PAM

PIM

Conditional Access

MFA

RBAC

PowerShell

APIs

Zero Trust

Tools

CyberArk

SailPoint

Job description

Senior Engineer, Identity & Access Management (IAM)

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and buildingdigital infrastructure.Riot’s mission is to empower the future of digital infrastructure by positivelyimpactingthe sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

Who we are

At Riot,we’rebuilding the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure.

Weare trailblazers. Problem solvers. People who thrive in fast pacedenvironments,communicate clearly, and bring relentless focus to efficiency and execution.

About the role

Riot Platforms is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments. This role will be hands-on and highly technical, with responsibility for building secure, scalable, and automated identity solutions that support Riot’s continued growth into AI/HPC and data center operations.

The Senior IAM Engineer will work closely with Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC.

This position will be based in our Austin office. Relocation assistance is available for non-local candidates.

What you'll do

• Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments .
• Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls .
• Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
• Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
• Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation .
• Engineer secure access for vendors, contractors, partners, and other third-party users .
• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities .
• Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards .
• Troubleshoot authentication, authorization, provisioning, and federation issues.
• Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation .
• Maintain technical documentation, architecture diagrams, standards, and operating procedures.
• Support IAM-related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
• Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.

What you'll bring

• 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
• Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory .
• Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
• Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.
• Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management .
• Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools.
• Strong troubleshooting skills across identity, networking, federation, and application integrations.
• Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams.
• Preferred experience with CyberArk or comparable privilege management technologies.
• Preferred experience with SailPoint or comparable entitlements management technologies.
• Preferred experience supporting cloud, data center, critical infrastructure, or AI/HPC environments.
• Preferred experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures.
• Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent.

Compensation and Benefits

• Competitive Salary: Base salary (commensuratewith experience) + bonus + sign-on equity grant.
• Long-Term Growth: Eligible toparticipatein Riot’s equity incentive programs and share in the success you help build.
• 401(k) Retirement Plan: Incudes a generous company match.
• Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans.
• Wellness & Lifestyle Perks: Enjoy free gymmemberships, pet insurance, childcare discounts, and more to support your life both in and out of work.

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.