About Riot Platforms
Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes.
Who we are
At Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure.
We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution.
About the role
Riot Platforms is seeking a Director of Identity & Access Management (IAM) to lead the strategy, architecture, engineering, and operations of our enterprise identity security program.
As Riot continues its evolution toward large-scale AI/HPC and data center operations, identity will be a foundational security control across our corporate, cloud, data center, and operational environments. This leader will be responsible for establishing a modern, scalable IAM program centered on Zero Trust, least privilege, strong authentication, privileged access management, identity governance, and automation.
The Director of IAM will report into Cybersecurity and partner closely with IT, Infrastructure, Cloud, Data Center Operations, People Operations, GRC, and business leaders.
This is a remote position with travel to Riot sites as needed.
What you'll be doing
- Develop and execute Riot’s enterprise IAM strategy and roadmap across workforce, privileged, third-party, and non-human identities.
- Own the architecture and security of Microsoft Entra ID, including SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls.
- Mature Riot’s Privileged Access Management (PAM) program and eliminate unnecessary standing administrative privileges.
- Establish scalable Identity Governance and Administration (IGA) capabilities for joiner/mover/leaver processes, access reviews, entitlement management, and segregation of duties.
- Implement least privilege and role-based access models across enterprise, cloud, SaaS, and data center environments.
- Develop governance for service accounts, API identities, machine identities, certificates, secrets, and other non-human identities.
- Establish secure and repeatable processes for vendors, contractors, partners, and other third-party access.
- Increase IAM automation and reduce manual provisioning, approval delays, and unnecessary user friction.
- Define IAM standards, architecture patterns, controls, and security requirements for new technology implementations.
- Partner with Cybersecurity Operations to detect and respond to identity-based attacks, credential compromise, privilege escalation, and anomalous authentication activity.
- Define measurable IAM KPIs and KRIs and regularly communicate program maturity, risks, and progress to leadership.
- Ensure IAM controls support Riot’s SOX, SOC 2 and ISO 27001, regulatory, audit, and broader security requirements.
- Lead IAM engineers and partners while developing the talent and capabilities needed as Riot’s environment grows.
What you'll have
- 10+ years of cybersecurity, IAM, infrastructure security, or related experience, including significant leadership responsibility.
- Demonstrated experience building or materially transforming an enterprise IAM program.
- Strong understanding of Zero Trust, least privilege, identity governance, PAM, authentication, authorization, and identity lifecycle management.
- Experience securing hybrid environments spanning on-premises infrastructure, cloud platforms, SaaS applications, and modern data center environments.
- Ability to translate identity risks and complex technical issues into clear business decisions.
- Strong experience partnering across Cybersecurity, IT, HR/People Operations, GRC, Infrastructure, and business teams.
- Demonstrated ability to balance security, operational efficiency, and user experience.
- Preferred experience supporting data centers, critical infrastructure, AI/HPC, or OT environments.
- Preferred experience implementing identity automation at enterprise scale.
- Preferred familiarity with SOX, SOC 2, ISO, NIST CSF, Zero Trust architecture, and related control frameworks.
- Preferred experience designing identity controls for cloud workloads and non-human identities.
- Certifications such as CISSP, CISM, CCSP, Microsoft Identity, highly preferred.
Compensation and Benefits
- Competitive Salary: $180,000-$200,000 base salary (commensurate with experience) + bonus + sign-on equity grant.
- Long-Term Growth: Eligible to participate in Riot’s equity incentive programs and share in the success you help build.
- 401(k) Retirement Plan: Incudes a generous company match.
- Comprehensive Health Coverage: Multiple medical plan options, including 100% company-paid plans.
- Wellness & Lifestyle Perks: Enjoy free gym memberships, pet insurance, childcare discounts, and more to support your life both in and out of work.
Riot is an equal opportunity employer. We are committed to creating an inclusive environment for all employees.
