Systems Engineer, IAM

About Riot PlatformsRiot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.Who We AreAt Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure. We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution.About The RoleRiot Platforms is looking for a Systems Engineer, IAM to own our Microsoft Entra and identity environment and engineer how we run it. This is a role for someone equally comfortable administering identity and access today and automating it as code tomorrow – managing Entra ID, conditional access, endpoints, and Microsoft 365, while applying infrastructure as code, CI/CD, and modern DevOps practices in equal measure.This position sits at the center of our shift from traditional system administration to a DevOps operating model. You’ll keep our identity, device, and Microsoft 365 environment secure and reliable, and progressively replace manual processes with automation, version-controlled configuration, and repeatable pipelines. You’ll work closely with software engineering, IT, and cyber security, and provide visibility across our Data Center, Bitcoin Mining, and Manufacturing operations.What You'll DoAdminister Microsoft Entra ID – Manage users, groups, roles, application registrations, and enterprise SSO (SAML/OIDC) across the organization.Manage access and privileged identity – Build and maintain conditional access policies, Privileged Identity Management (PIM), MFA, and just-in-time access workflows (including StrongDM) to enforce least privilege.Operate hybrid identity – Maintain on-premises Active Directory, Entra Connect synchronization, and hybrid identity across cloud and on-premises environments.Manage endpoints with Intune and Jamf – Configure device management, compliance, and endpoint security policies through Microsoft Intune and Jamf.Administer Microsoft 365 – Manage Exchange Online, licensing, and broader Microsoft 365 services to keep collaboration secure and reliable.Automate configuration as code – Define and manage identity and infrastructure configuration using tools such as Terraform, AWS CDK, and SaltStack to make environments repeatable and auditable.Build CI/CD and automation pipelines – Replace manual administrative tasks with version-controlled automation and CI/CD pipelines (GitLab CI/CD, GitHub Actions).Script and build tooling – Develop automation in PowerShell, Python, or C# to streamline provisioning, reporting, and routine operations.Implement monitoring, alerting, and logging – Stand up observability and audit logging across identity, endpoints, and infrastructure using tools such as Prometheus and Grafana and native cloud tooling. Advance the DevOps operating model – Help mature standards, documentation, and engineering practices as the team moves from manual administration toward a DevOps operating model.Knowledge, Skills, and AbilitiesMicrosoft Entra ID – Strong hands-on experience administering Entra ID (Azure AD): users, groups, roles, app registrations, and SSO.Access and identity security – Experience with conditional access, MFA, Privileged Identity Management (PIM), and just-in-time/privileged access tooling such as StrongDM.Hybrid identity – Experience with on-premises Active Directory and Entra Connect synchronization.Endpoint management – Hands-on experience with Microsoft Intune for device management and compliance.Microsoft 365 administration – Experience administering Microsoft 365, including Exchange Online and licensing.Infrastructure as code – Experience with, or a strong drive to grow into, IaC tools such as Terraform, AWS CDK, or SaltStack.CI/CD and version control – Familiarity with Git and CI/CD tooling (GitLab CI/CD, GitHub Actions) for automating configuration and deployments.Scripting and automation – Proficiency in PowerShell and at least one of Python or C# (C# preferred).Security mindset – Strong understanding of identity, access, and infrastructure security best practices.Problem-solving and communication – Excellent problem-solving skills and the ability to communicate clearly with both technical and non-technical stakeholders.Nice to HaveRelevant Microsoft certifications (e.g., SC-300 Identity and Access Administrator, AZ-104, or equivalent)Experience automatingEntra and Microsoft 365 administration with Microsoft Graph (PowerShell SDK or API)Experience supporting a transition from manual system administration to a DevOps / infrastructure-as-code modelExposure to AWS or other multi-cloud environmentsExperience with cryptocurrency, blockchain, or high-performance computing environmentsExperience in manufacturing, construction, energy, mining, data center, or other capital-intensive industriesWhat You'll BringBachelor’s degree in Computer Science, Information Technology, Engineering, or a related field – equivalent experience considered.4+ years of experience in systems engineering, system administration, or identity and access administration.Hands-on experience with Microsoft Entra ID and/or Active Directory required.Microsoft or cloud certification preferred.Why This Role MattersThis role is how Riot modernizes the way it runs systems. You won’t just keep identity and devices running – you’ll engineer them, turning manual administration into automated, version-controlled infrastructure. If you want to deepen your identity expertise while building real DevOps and automation skills, this role offers a clear path to do both and make a visible impact.Compensation and Benefits Competitive Salary: $115,000 - $135,000 (commensurate with experience) + bonus + sign-on equity grant401(k) plan with company matchingGreat medical, vision, and dental plans to choose fromLong-term and short-term disabilityAdditional benefit options (Employee Assistance Program, Pet Insurance, and more)Flexible Spending AccountsGenerous PTO and Paid HolidaysA fun company culture with tremendous growth opportunitiesRiot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.