Senior Engineer, Identity & Access Management – IAM

Job Description:

• Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments
• Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls
• Implement and maintain PAM capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access
• Support IGA processes, including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access
• Automate user and access provisioning using SCIM, APIs, scripting, PowerShell, and workflow automation
• Engineer secure access for vendors, contractors, partners, and other third-party users
• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities
• Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards
• Troubleshoot authentication, authorization, provisioning, and federation issues
• Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation
• Maintain technical documentation, architecture diagrams, standards, and operating procedures
• Support IAM-related audit and compliance activities, including SOX, SOC 2, and ISO 27001 evidence and control testing
• Identify opportunities to reduce manual processes, strengthen security, and improve the user experience

Requirements:

• 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience
• Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory
• Demonstrated experience integrating enterprise applications with SSO and automated provisioning
• Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance
• Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management
• Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools
• Strong troubleshooting skills across identity, networking, federation, and application integrations
• Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams
• Preferred experience with CyberArk or comparable privilege management technologies
• Preferred experience with SailPoint or comparable entitlements management technologies
• Preferred experience supporting cloud, data center, critical infrastructure, or AI/HPC environments
• Preferred experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures
• Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent

Benefits:

• Bonus
• Sign-on equity grant
• Eligibility to participate in Riot’s equity incentive programs
• 401(k) retirement plan with generous company match
• Multiple medical plan options, including 100% company-paid plans
• Free gym memberships
• Pet insurance
• Childcare discounts