Senior Engineer, Identity & Access Management – IAM

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, implement, and support Identity and Access Management (IAM) solutions across Microsoft Entra ID, Active Directory, SaaS, cloud, and data center environments.

• Oversee and enhance Single Sign-On (SSO), Conditional Access, Multi-Factor Authentication (MFA), passwordless authentication, Privileged Identity Management (PIM), Role-Based Access Control (RBAC), and identity lifecycle controls.

• Implement and uphold Privileged Access Management (PAM) capabilities, including onboarding privileged accounts, credential rotation, session controls, and the removal of standing access.

• Support Identity Governance and Administration (IGA) processes, encompassing joiner/mover/leaver workflows, access reviews, entitlement management, and role-based access.

• Automate user and access provisioning utilizing SCIM, APIs, scripting, PowerShell, and workflow automation.

• Engineer secure access solutions for vendors, contractors, partners, and other third-party users.

• Develop and maintain controls for service accounts, application identities, API access, secrets, certificates, and other non-human identities.

• Integrate enterprise applications with SSO using standards such as SAML, OAuth 2.0, OpenID Connect, and others.

• Troubleshoot issues related to authentication, authorization, provisioning, and federation.

• Collaborate with Cybersecurity Operations to investigate identity-related threats, anomalous authentication, credential compromise, and privilege escalation.

• Maintain technical documentation, architecture diagrams, standards, and operating procedures.

• Assist with IAM-related audit and compliance activities, including evidence and control testing for SOX, SOC 2, and ISO 27001.

• Identify opportunities to minimize manual processes, enhance security, and improve user experience.

⛳️ Requirements

• A minimum of 5 years of experience in IAM, cybersecurity engineering, identity engineering, or a related technical field.

• Strong hands-on experience with Microsoft identity technologies, particularly Entra ID and Active Directory.

• Proven experience in integrating enterprise applications with SSO and automated provisioning.

• Experience in implementing or supporting PAM, PIM, Conditional Access, MFA, and access governance.

• Solid understanding of least privilege principles, Zero Trust, RBAC, authentication, authorization, and identity lifecycle management.

• Proficiency in scripting and automating IAM processes using PowerShell, APIs, or similar tools.

• Excellent troubleshooting skills across identity, networking, federation, and application integrations.

• Ability to collaborate effectively across Cybersecurity, IT, Infrastructure, and business teams.

• Preferred experience with CyberArk or similar privilege management technologies.

• Preferred experience with SailPoint or similar entitlements management technologies.

• Preferred experience in supporting cloud, data center, critical infrastructure, or AI/HPC environments.

• Preferred familiarity with SOX, SOC 2, ISO, NIST CSF, and Zero Trust architectures.

• Certification in Microsoft, CyberArk, SailPoint, CISSP, CCSP, or an equivalent credential.

🏝️ Benefits

• Bonus

• Sign-on equity grant

• Eligibility to participate in Riot’s equity incentive programs

• 401(k) retirement plan with generous company match

• Multiple medical plan options, including 100% company-paid plans

• Free gym memberships

• Pet insurance

• Childcare discounts