Director, Identity & Access Management – IAM

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and implement Riot's enterprise IAM strategy and roadmap encompassing workforce, privileged, third-party, and non-human identities.

• Take ownership of the architecture and security of Microsoft Entra ID, including SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.

• Enhance the Privileged Access Management program and eliminate unnecessary standing administrative privileges.

• Establish Identity Governance and Administration capabilities for joiner/mover/leaver processes, access reviews, entitlement management, and segregation of duties.

• Implement least privilege and role-based access models across enterprise, cloud, SaaS, and data center environments.

• Develop governance for service accounts, API identities, machine identities, certificates, secrets, and other non-human identities.

• Create secure and repeatable processes for vendors, contractors, partners, and other third-party access.

• Increase IAM automation to reduce manual provisioning, approval delays, and unnecessary user friction.

• Define IAM standards, architecture patterns, controls, and security requirements for new technology implementations.

• Collaborate with Cybersecurity Operations to detect and respond to identity-based attacks, credential compromise, privilege escalation, and anomalous authentication activities.

• Establish measurable IAM KPIs and KRIs, regularly communicating program maturity, risks, and progress to leadership.

• Ensure IAM controls comply with Riot's SOX, SOC 2, ISO 27001, regulatory, audit, and broader security requirements.

• Lead IAM engineers and partners, fostering talent and capabilities as Riot's environment evolves.

• Report to Cybersecurity and collaborate with IT, Infrastructure, Cloud, Data Center Operations, People Operations, GRC, and business leaders.

⛳️ Requirements

• 10+ years of experience in cybersecurity, IAM, infrastructure security, or a related field, with substantial leadership responsibilities.

• Proven experience in building or significantly transforming an enterprise IAM program.

• Strong understanding of Zero Trust, least privilege, identity governance, PAM, authentication, authorization, and identity lifecycle management.

• Experience securing hybrid environments that include on-premises infrastructure, cloud platforms, SaaS applications, and modern data center environments.

• Ability to convey identity risks and complex technical issues into straightforward business decisions.

• Strong experience in collaborating across Cybersecurity, IT, HR/People Operations, GRC, Infrastructure, and business teams.

• Demonstrated capability to balance security, operational efficiency, and user experience.

• Preferred experience in supporting data centers, critical infrastructure, AI/HPC, or OT environments.

• Preferred experience in implementing identity automation at an enterprise scale.

• Preferred familiarity with SOX, SOC 2, ISO, NIST CSF, Zero Trust architecture, and related control frameworks.

• Preferred experience designing identity controls for cloud workloads and non-human identities.

• Certifications such as CISSP, CISM, CCSP, and Microsoft Identity are highly preferred.

🏝️ Benefits

• Bonus

• Sign-on equity grant

• Eligibility to participate in Riot's equity incentive programs

• 401(k) Retirement Plan with a generous company match

• Multiple medical plan options, including 100% company-paid plans

• Free gym memberships

• Pet insurance

• Childcare discounts