> Markdown version of [/jobs/ext/3749982-engineer-identity-access-management-iam](https://www.wearedevelopers.com/jobs/ext/3749982-engineer-identity-access-management-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Engineer, Identity & Access Management (IAM

- **Company:** Riot Platforms, Inc
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $160,000.0 - $175,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, User Authentication, Cloud Computing, Cyber Security, Data Centers, Multi-Factor Authentication, Identity and Access Management, Microsoft Software, OAuth, Windows PowerShell, Role-Based Access Control, Openid Connect, Zero Trust Network Access, Security Assertion Markup Language (SAML), Systems Integration, Scripting, Enterprise Software Applications, High Performance Computing, Cyberark, National Institute of Standards and Technology Cybersecurity Framework, SailPoint
- **Published:** October 15, 2026
- **Apply:** https://www.builtincolorado.com/auth/login?destination=/job/senior-engineer-identity-access-management-iam/11692295

## About the Role

* 5+ years of IAM, cybersecurity engineering, identity engineering, or related technical experience.
 * Strong hands-on experience with Microsoft identity technologies, especially Entra ID and Active Directory.
 * Demonstrated experience integrating enterprise applications with SSO and automated provisioning.
 * Experience implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.
 * Strong understanding of least privilege, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management.
 * Experience scripting and automating IAM processes using PowerShell, APIs, or similar tools.
 * Strong troubleshooting skills across identity, networking, federation, and application integrations.
 * Ability to work effectively across Cybersecurity, IT, Infrastructure, and business teams.
 * Preferred experience with CyberArk or comparable privilege management technologies.
 * Preferred experience with SailPoint or comparable entitlements management technologies.
 * Preferred experience supporting cloud, data center, critical infrastructure, or AI/HPC environments.
 * Preferred experience with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures.
 * Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or equivalent.

## Description

Riot Platforms is seeking a Senior Engineer, Identity & Access Management (IAM) to design, implement, and operate modern identity security capabilities across our enterprise, cloud, SaaS, and data center environments. This role will be hands-on and highly technical, with responsibility for building secure, scalable, and automated identity solutions that support Riot's continued growth into AI/HPC and data center operations.

The Senior IAM Engineer will work closely with Cybersecurity, IT, Cloud, Infrastructure, Data Center Operations, People Operations, and GRC.

This is a remote position with travel to Riot sites as needed.

What you'll do

 * Design, implement, and support IAM solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.
 * Manage and optimize SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
 * Implement and maintain Privileged Access Management (PAM) capabilities, including privileged account onboarding, credential rotation, session controls, and removal of standing access.
 * Support Identity Governance and Administration (IGA) processes including joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.
 * Automate user and access provisioning using technologies such as SCIM, APIs, scripting, PowerShell, and workflow automation.
 * Engineer secure access for vendors, contractors, partners, and other third-party users.
 * Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities.
 * Integrate enterprise applications with SSO using SAML, OAuth 2.0, OpenID Connect, and related standards.
 * Troubleshoot authentication, authorization, provisioning, and federation issues.
 * Partner with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation.
 * Maintain technical documentation, architecture diagrams, standards, and operating procedures.
 * Support IAM-related audit and compliance activities, including SOX, SOC 2 and ISO 27001 evidence and control testing.
 * Identify opportunities to reduce manual processes, strengthen security, and improve the user experience.