Senior Engineer, Identity & Access Management (IAM)

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

Who we are

At Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure. 

We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution.

About the role

Riot Platforms is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments. This role will be hands-on and highly technical, with responsibility for building secure, scalable, and automated identity solutions that support Riot’s continued growth into AI/HPC and data center operations.

The Senior IAM Engineer will work closely with Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC.

This is a remote position with travel to Riot sites as needed.

What you'll do

• Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.
• Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
• Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
• Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
• Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
• Engineer secure access for vendors, contractors, partners, and other third-party users.
• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities.
• Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
• Troubleshoot authentication, authorization, provisioning, and federation issues.
• Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation.
• Maintain technical documentation, architecture diagrams, standards, and operating procedures.
• Support IAM-related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
• Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.

What you'll bring

• 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
• Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory.
• Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
• Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.
• Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management.
• Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools.
• Strong troubleshooting skills across identity, networking, federation, and application integrations.
• Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams.
• Preferred experience with CyberArk or comparable privilege management technologies.
• Preferred experience with SailPoint or comparable entitlements management technologies.
• Preferred experience supporting cloud, data center, critical infrastructure, or AI/HPC environments.
• Preferred experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures.
• Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent.

Compensation and Benefits 

• Competitive Salary: $160,000-$175,000 (commensurate with experience) + bonus + sign-on equity grant. 
• Long-Term Growth: Eligible to participate in Riot’s equity incentive programs and share in the success you help build. 
• 401(k) Retirement Plan: Incudes a generous company match. 
• Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans. 
• Wellness & Lifestyle Perks: Enjoy free gym memberships, pet insurance, childcare discounts, and more to support your life both in and out of work. 

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.