Senior Engineer, Identity & Access Management (IAM)

Riot Platforms, Inc.; United States; Remote; USD 160,000 - 175,000; Full time

Benefits offered by this job

Sign-on equity grant

401(k) match

Health coverage

Gym memberships

Job summary

Riot Platforms, Inc. seeks a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security across enterprise, cloud, SaaS, and data center environments. This remote role requires collaboration with Cybersecurity, IT, Cloud, and Data Center Operations.

You will automate provisioning, manage PAM/PIM, enable strong authentication, and support identity governance. Travel to Riot sites as needed.

Qualifications

• 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
• Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory.
• Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
• Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.
• Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management.
• Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools.

Responsibilities

• Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.
• Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
• Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
• Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
• Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
• Engineer secure access for vendors, contractors, partners, and other third-party users.
• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities.
• Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
• Troubleshoot authentication, authorization, provisioning, and federation issues.
• Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation.

Skills

Microsoft Entra ID

Active Directory

SSO

PAM

PIM

Conditional Access

MFA

RBAC

Identity lifecycle

PowerShell

Education

CISSP

CCSP

Microsoft Certification

Tools

CyberArk

SailPoint

Job description

About the role

Riot Platforms is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments. This role will be hands-on and highly technical, with responsibility for building secure, scalable, and automated identity solutions that support Riot’s continued growth into AI/HPC and data center operations.

The Senior IAM Engineer will work closely with Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC.

This is a remote position with travel to Riot sites as needed.

What you’ll do

• Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.
• Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
• Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
• Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
• Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
• Engineer secure access for vendors, contractors, partners, and other third-party users.
• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities.
• Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
• Troubleshoot authentication, authorization, provisioning, and federation issues.
• Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation.
• Maintain technical documentation, architecture diagrams, standards, and operating procedures.
• Support IAM-related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
• Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.

What you’ll bring

• 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
• Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory.
• Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
• Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.
• Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management.
• Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools.
• Strong troubleshooting skills across identity, networking, federation, and application integrations.
• Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams.
• Preferred experience with CyberArk or comparable privilege management technologies.
• Preferred experience with SailPoint or comparable entitlements management technologies.
• Preferred experience supporting cloud, data center, critical infrastructure, or AI/HPC environments.
• Preferred experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures.
• Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent.

Compensation and Benefits

• Competitive Salary: $160,000-$175,000 (commensuratewith experience) + bonus + sign-on equity grant.
• Long-Term Growth: Eligible toparticipatein Riot’s equity incentive programs and share in the success you help build.
• 401(k) Retirement Plan: Incudes a generous company match.
• Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans.
• Wellness & Lifestyle Perks: Enjoy free gymmemberships, pet insurance, childcare discounts, and more to support your life both in and out of work.

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.