Systems Engineer, IAM

Riot Platforms, Inc.; Castle Rock (CO); On-site; USD 115,000 - 135,000; Full time

Benefits offered by this job

401(k) matching

Medical, vision, and dental plans

Disability insurance

Paid holidays

Sign-on equity grant

Bonus

Job summary

Riot Platforms, Inc. is seeking a Systems Engineer, IAM to own Microsoft Entra and identity governance. You will administer Entra ID, manage access and conditional access policies, and drive DevOps practices across hybrid environments.

You’ll collaborate with software teams, IT, and security to automate configurations, build CI/CD pipelines, and ensure secure, scalable identity and device management across Riot’s data centers and manufacturing operations.

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• Hands-on Entra ID/Active Directory administration experience.
• Experience with CI/CD tooling and scripting.

Responsibilities

• Administer Microsoft Entra ID – manage users, groups, roles, registrations, and SSO across the organization.
• Build and maintain conditional access policies and least-privilege workflows.
• Operate hybrid identity across cloud and on-prem environments.
• Manage endpoints with Intune and Jamf for device compliance and security.
• Administer Microsoft 365 services including Exchange Online and licensing.
• Automate configuration as code using IaC tools to make environments repeatable.
• Build CI/CD and automation pipelines using GitLab CI/CD and GitHub Actions.
• Develop automation in PowerShell, Python, or C# for provisioning and reporting.
• Implement monitoring, alerting, and logging with Prometheus, Grafana, and cloud tools.
• Advance DevOps practices with documentation and standardized engineering processes.

Skills

Microsoft Entra ID

Azure AD

Conditional access

MFA

Privileged Identity Management

Entra Connect

Intune

Jamf

IaC (Terraform)

GitLab CI/CD

GitHub Actions

PowerShell

Python

C#

DevOps

Security best practices

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field

Tools

Terraform

AWS CDK

SaltStack

Job description

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

Who We Are

At Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure.

We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution.

About The Role

Riot Platforms is looking for a Systems Engineer, IAM to own our Microsoft Entra and identity environment and engineer how we run it. This is a role for someone equally comfortable administering identity and access today and automating it as code tomorrow – managing Entra ID, conditional access, endpoints, and Microsoft 365, while applying infrastructure as code, CI/CD, and modern DevOps practices in equal measure.

This position sits at the center of our shift from traditional system administration to a DevOps operating model. You’ll keep our identity, device, and Microsoft 365 environment secure and reliable, and progressively replace manual processes with automation, version-controlled configuration, and repeatable pipelines. You’ll work closely with software engineering, IT, and cyber security, and provide visibility across our Data Center, Bitcoin Mining, and Manufacturing operations.

• Administer Microsoft Entra ID – Manage users, groups, roles, application registrations, and enterprise SSO (SAML/OIDC) across the organization.
• Manage access and privileged identity – Build and maintain conditional access policies, Privileged Identity Management (PIM), MFA, and just-in-time access workflows (including StrongDM) to enforce least privilege.
• Operate hybrid identity – Maintain on-premises Active Directory, Entra Connect synchronization, and hybrid identity across cloud and on-premises environments.
• Manage endpoints with Intune and Jamf – Configure device management, compliance, and endpoint security policies through Microsoft Intune and Jamf.
• Administer Microsoft 365 – Manage Exchange Online, licensing, and broader Microsoft 365 services to keep collaboration secure and reliable.
• Automate configuration as code – Define and manage identity and infrastructure configuration using tools such as Terraform, AWS CDK, and SaltStack to make environments repeatable and auditable.
• Build CI/CD and automation pipelines – Replace manual administrative tasks with version-controlled automation and CI/CD pipelines (GitLab CI/CD, GitHub Actions).
• Script and build tooling – Develop automation in PowerShell, Python, or C# to streamline provisioning, reporting, and routine operations.
• Implement monitoring, alerting, and logging – Stand up observability and audit logging across identity, endpoints, and infrastructure using tools such as Prometheus and Grafana and native cloud tooling.
• Advance the DevOps operating model – Help mature standards, documentation, and engineering practices as the team moves from manual administration toward a DevOps operating model.

Knowledge, Skills, And Abilities

• Microsoft Entra ID – Strong hands‑on experience administering Entra ID (Azure AD): users, groups, roles, app registrations, and SSO.
• Access and identity security – Experience with conditional access, MFA, Privileged Identity Management (PIM), and just‑in‑time/privileged access tooling such as StrongDM.
• Hybrid identity – Experience with on‑premises Active Directory and Entra Connect synchronization.
• Endpoint management – Hands‑on experience with Microsoft Intune for device management and compliance.
• Microsoft 365 administration – Experience administering Microsoft 365, including Exchange Online and licensing.
• Infrastructure as code – Experience with, or a strong drive to grow into, IaC tools such as Terraform, AWS CDK, or SaltStack.
• CI/CD and version control – Familiarity with Git and CI/CD tooling (GitLab CI/CD, GitHub Actions) for automating configuration and deployments.
• Scripting and automation – Proficiency in PowerShell and at least one of Python or C# (C# preferred).
• Security mindset – Strong understanding of identity, access, and infrastructure security best practices.
• Problem-solving and communication – Excellent problem‑solving skills and the ability to communicate clearly with both technical and non‑technical stakeholders.

Nice to Have

• Relevant Microsoft certifications (e.g., SC-300 Identity and Access Administrator, AZ-104, or equivalent)Experience automating
• Entra and Microsoft 365 administration with Microsoft Graph (PowerShell SDK or API)
• Experience supporting a transition from manual system administration to a DevOps / infrastructure-as-code model
• Exposure to AWS or other multi-cloud environments
• Experience with cryptocurrency, blockchain, or high-performance computing environments
• Experience in manufacturing, construction, energy, mining, data center, or other capital-intensive industries

What You'll Bring

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field – equivalent experience considered.
• 4+ years of experience in systems engineering, system administration, or identity and access administration.
• Hands-on experience with Microsoft Entra ID and/or Active Directory required.
• Microsoft or cloud certification preferred.

Why This Role Matters

This role is how Riot modernizes the way it runs systems. You won’t just keep identity and devices running – you’ll engineer them, turning manual administration into automated, version-controlled infrastructure. If you want to deepen your identity expertise while building real DevOps and automation skills, this role offers a clear path to do both and make a visible impact.

Compensation And Benefits

• Competitive Salary: $115,000 - $135,000 (commensurate with experience) + bonus + sign-on equity grant
• 401(k) plan with company matching
• Great medical, vision, and dental plans to choose from
• Long-term and short-term disability
• Additional benefit options (Employee Assistance Program, Pet Insurance, and more)
• Flexible Spending Accounts
• Generous PTO and Paid Holidays
• A fun company culture with tremendous growth opportunities

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.