Senior Engineer, Identity & Access Management (IAM)

Riot Platforms, Inc.; Austin (TX); Presencial; USD 140 000 - 210 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary and bonus

Equity incentive programs

401(k) with company match

Comprehensive health coverage

Wellness and lifestyle perks

Resumo da oferta

Riot Platforms, Inc. in Austin is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments.

This role will be hands-on and highly technical, collaborating across Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC. Relocation assistance is available for non-local candidates.

Qualificações

• 5+ years of IAM or related cybersecurity engineering experience.
• Strong hands-on experience with Microsoft identity technologies (Entra ID, AD).
• Experience integrating enterprise apps with SSO and automated provisioning.
• Experience implementing or supporting PAM, PIM, CA, MFA, and access governance.
• Understanding of least privilege, Zero Trust, RBAC, identity lifecycle management.
• Experience scripting/automating IAM processes (PowerShell, APIs).
• Ability to work across Cybersecurity, IT, Infrastructure, and business teams.
• Certifications in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent.

Responsabilidades

• Design, implement, and support IAM solutions across Entra ID, Active Directory, SaaS, cloud, and data center environments.
• Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
• Implement and maintain PAM capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
• Support IGA processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
• Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
• Engineer secure access for vendors, contractors, partners, and other third‑party users.
• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non‑human identities.
• Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
• Troubleshoot authentication, authorization, provisioning, and federation issues.
• Partner with Cybersecurity Operations to investigate identity‑related threats, anomalous authentication, credential compromise, and privilege escalation.
• Maintain technical documentation, architecture diagrams, standards, and operating procedures.
• Support IAM‑related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
• Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.

Conhecimentos

IAM expertise

Zero Trust

RBAC

PowerShell scripting

Troubleshooting

Ferramentas

Entra ID

Active Directory

SailPoint

CyberArk

Descrição da oferta de emprego

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

Who We Are

At Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure. We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution.

About The Role

Riot Platforms is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments. This role will be hands‑on and highly technical, with responsibility for building secure, scalable, and automated identity solutions that support Riot’s continued growth into AI/HPC and data center operations. The Senior IAM Engineer will work closely with Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC. This position will be based in our Austin office. Relocation assistance is available for non-local candidates.

What You’ll Do

• Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.
• Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
• Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
• Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
• Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
• Engineer secure access for vendors, contractors, partners, and other third‑party users.
• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non‑human identities.
• Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
• Troubleshoot authentication, authorization, provisioning, and federation issues.
• Partner with Cybersecurity Operations to investigate identity‑related threats, anomalous authentication, credential compromise, and privilege escalation.
• Maintain technical documentation, architecture diagrams, standards, and operating procedures.
• Support IAM‑related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
• Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.

What You’ll Bring

• 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
• Strong hands‑on experience with Microsoft identity technologies, especially Entra ID and Active Directory.
• Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
• Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.
• Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management.
• Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools.
• Strong troubleshooting skills across identity, networking, federation, and application integrations.
• Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams.
• Preferred experience with CyberArk or comparable privilege management technologies.
• Preferred experience with SailPoint or comparable entitlements management technologies.
• Preferred experience supporting cloud, data center, critical infrastructure, or AI/HPC environments.
• Preferred experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures.
• Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent.

Compensation And Benefits

• Competitive Salary: Base salary (commensurate with experience) + bonus + sign‑on equity grant.
• Long‑Term Growth: Eligible to participate in Riot’s equity incentive programs and share in the success you help build.
• 401(k) Retirement Plan: Incudes a generous company match.
• Comprehensive Health Coverage: Multiple medical plan options, including 100% company‑paid plans.
• Wellness & Lifestyle Perks: Enjoy free gym memberships, pet insurance, childcare discounts, and more to support your life both in and out of work.

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.