Director, Identity & Access Management (IAM) at Riot Platforms

Job description

About Riot Platforms Riot’s (NASDAQ: RIOT) vision is to be the world’s most trusted platform for powering and building digital infrastructure. Riot’s mission is to empower the future of digital infrastructure by positively impacting the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows us to achieve best-in-class execution and create successful outcomes. Who we are At Riot, we’re building the future of digital infrastructure. Our team members have unparalleled opportunities to work on groundbreaking initiatives. Through technical excellence and strategic execution, Riot has positioned itself as a leader in the industry driving advancements that continue to set new benchmarks in digital infrastructure. We are trailblazers. Problem solvers. People who thrive in fast paced environments, communicate clearly, and bring relentless focus to efficiency and execution. About the role Riot Platforms is seeking a Director of Identity & Access Management (IAM) to lead the strategy, architecture, engineering, and operations of our enterprise identity security program. As Riot continues its evolution toward large-scale AI/HPC and data center operations, identity will be a foundational security control across our corporate, cloud, data center, and operational environments. This leader will be responsible for establishing a modern, scalable IAM program centered on Zero Trust, least privilege, strong authentication, privileged access management, identity governance, and automation . The Director of IAM will report into Cybersecurity and partner closely with IT, Infrastructure, Cloud, Data Center Operations, People Operations, GRC, and business leaders. This is a remote position with travel to Riot sites as needed. What you'll be doing Develop and execute Riot’s enterprise IAM strategy and roadmap across workforce, privileged, third-party, and non-human identities. Own the architecture and security of Microsoft Entra ID , including SSO, Conditional Access, MFA, passwordless authentication, PIM, RBAC, and identity lifecycle controls. Mature Riot’s Privileged Access Management (PAM) program and eliminate unnecessary standing administrative privileges. Establish scalable Identity Governance and Administration (IGA) capabilities for joiner/mover/leaver processes, access reviews, entitlement management, and segregation of duties. Implement least privilege and role-based access models across enterprise, cloud, SaaS, and data center environments. Develop governance for service accounts, API identities, machine identities, certificates, secrets, and other non-human identities . Establish secure and repeatable processes for vendors, contractors, partners, and other third-party access . Increase IAM automation and reduce manual provisioning, approval delays, and unnecessary user friction. Define IAM standards, architecture patterns, controls, and security requirements for new technology implementations. Partner with Cybersecurity Operations to detect and respond to identity-based attacks, credential compromise, privilege escalation, and anomalous authentication activity . Define measurable IAM KPIs and KRIs and regularly communicate program maturity, risks, and progress to leadership. Ensure IAM controls support Riot’s SOX, SOC 2 and ISO 27001, regulatory, audit, and broader security requirements . Lead IAM engineers and partners while developing the talent and capabilities needed as Riot’s environment grows. What you'll have 10+ years of cybersecurity, IAM, infrastructure security, or related experience, including significant leadership responsibility. Demonstrated experience building or materially transforming an enterprise IAM program. Strong understanding of Zero Trust, least privilege, identity governance, PAM, authentication, authorization, and identity lifecycle management . Experience securing hybrid environments spanning on-premises infrastructure, clo