Senior Engineer, Identity & Access Management (IAM)
Riot Platforms, a bitcoin miner expanding into AI/HPC and data center operations, seeks a hands-on Senior IAM Engineer to design and run identity security across Microsoft Entra ID, Active Directory, cloud, SaaS, and data center environments — covering SSO, PAM/PIM, IGA, and automation with PowerShell and SCIM. Remote US role with occasional site travel.
- Compensation
- $160K–$175K / yr
- Location
- Remote (United States)
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience
- Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory
- Demonstrated experience integrating enterprise applications with SSO and automated provisioning
- Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance
- Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management
- Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools
- Strong troubleshooting skills across identity, networking, federation, and application integrations
- Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams
- Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent
Nice to have
- Experience with CyberArk or comparable privilege management technologies
- Experience with SailPoint or comparable entitlements management technologies
- Experience supporting cloud, data center, critical infrastructure, or AI/HPC environments
- Experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures
Full description
About the role
Riot Platforms is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments. This role will be hands-on and highly technical, with responsibility for building secure, scalable, and automated identity solutions that support Riot’s continued growth into AI/HPC and data center operations.
The Senior IAM Engineer will work closely with Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC.
This is a remote position with travel to Riot sites as needed.
What you'll do
- Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.
- Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
- Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
- Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
- Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
- Engineer secure access for vendors, contractors, partners, and other third-party users.
- Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities.
- Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
- Troubleshoot authentication, authorization, provisioning, and federation issues.
- Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation.
- Maintain technical documentation, architecture diagrams, standards, and operating procedures.
- Support IAM-related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
- Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.
What you'll bring
- 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
- Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory.
- Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
- Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.