Systems Engineer, IAM

About Riot Platforms

Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.

Who We Are

At Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure. 

We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution.

About The Role

Riot Platforms is looking for a Systems Engineer, IAM to own our Microsoft Entra and identity environment and engineer how we run it. This is a role for someone equally comfortable administering identity and access today and automating it as code tomorrow – managing Entra ID, conditional access, endpoints, and Microsoft 365, while applying infrastructure as code, CI/CD, and modern DevOps practices in equal measure.

This position sits at the center of our shift from traditional system administration to a DevOps operating model. You’ll keep our identity, device, and Microsoft 365 environment secure and reliable, and progressively replace manual processes with automation, version-controlled configuration, and repeatable pipelines. You’ll work closely with software engineering, IT, and cyber security, and provide visibility across our Data Center, Bitcoin Mining, and Manufacturing operations.

This position will be based in our Austin or Castle Rock office.

What You'll Do

• Administer Microsoft Entra ID – Manage users, groups, roles, application registrations, and enterprise SSO (SAML/OIDC) across the organization.
• Manage access and privileged identity – Build and maintain conditional access policies, Privileged Identity Management (PIM), MFA, and just-in-time access workflows (including StrongDM) to enforce least privilege.
• Operate hybrid identity – Maintain on-premises Active Directory, Entra Connect synchronization, and hybrid identity across cloud and on-premises environments.
• Manage endpoints with Intune and Jamf – Configure device management, compliance, and endpoint security policies through Microsoft Intune and Jamf.
• Administer Microsoft 365 – Manage Exchange Online, licensing, and broader Microsoft 365 services to keep collaboration secure and reliable.
• Automate configuration as code – Define and manage identity and infrastructure configuration using tools such as Terraform, AWS CDK, and SaltStack to make environments repeatable and auditable.
• Build CI/CD and automation pipelines – Replace manual administrative tasks with version-controlled automation and CI/CD pipelines (GitLab CI/CD, GitHub Actions).
• Script and build tooling – Develop automation in PowerShell, Python, or C# to streamline provisioning, reporting, and routine operations.
• Implement monitoring, alerting, and logging – Stand up observability and audit logging across identity, endpoints, and infrastructure using tools such as Prometheus and Grafana and native cloud tooling.
• Advance the DevOps operating model – Help mature standards, documentation, and engineering practices as the team moves from manual administration toward a DevOps operating model.

What You'll Bring

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field – equivalent experience considered.
• 4+ years of experience in systems engineering, system administration, or identity and access administration.
• Hands-on experience with Microsoft Entra ID and/or Active Directory required.
• Microsoft or cloud certification preferred.

Nice to Have

• Preferred - Relevant Microsoft certifications (e.g., SC-300 Identity and Access Administrator, AZ-104, or equivalent)
• Preferred - Experience automating Entra and Microsoft 365 administration with Microsoft Graph (PowerShell SDK or API)
• Demonstrated experience supporting SOC compliance programs, including control implementation, audit preparation, risk management, documentation governance, and coordination with internal and external auditors.
• Experience supporting a transition from manual system administration to a DevOps / infrastructure-as-code model
• Experience with cryptocurrency, blockchain, or high-performance computing environments
• Experience in manufacturing, construction, energy, mining, data center, or other capital-intensive industries
• Exposure to AWS or other multi-cloud environments

Compensation and Benefits

• Competitive Salary: $115,000 - $135,000 (commensurate with experience) + bonus + sign-on equity grant
• 401(k) plan with company matching
• Great medical, vision, and dental plans to choose from
• Long-term and short-term disability
• Additional benefit options (Employee Assistance Program, Pet Insurance, and more)
• Flexible Spending Accounts
• Generous PTO and Paid Holidays
• A fun company culture with tremendous growth opportunities

Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.