About The RoleRiot Platforms is looking for a Systems Engineer, IAM to own our Microsoft Entra and identity environment and engineer how we run it. This is a role for someone equally comfortable administering identity and access today and automating it as code tomorrow - managing Entra ID, conditional access, endpoints, and Microsoft 365, while applying infrastructure as code, CI/CD, and modern DevOps practices in equal measure.
This position sits at the center of our shift from traditional system administration to a DevOps operating model. You'll keep our identity, device, and Microsoft 365 environment secure and reliable, and progressively replace manual processes with automation, version-controlled configuration, and repeatable pipelines. You'll work closely with software engineering, IT, and cyber security, and provide visibility across our Data Center, Bitcoin Mining, and Manufacturing operations.
What You'll Do- Administer Microsoft Entra ID - Manage users, groups, roles, application registrations, and enterprise SSO (SAML/OIDC) across the organization.
- Manage access and privileged identity - Build and maintain conditional access policies, Privileged Identity Management (PIM), MFA, and just-in-time access workflows (including StrongDM) to enforce least privilege.
- Operate hybrid identity - Maintain on-premises Active Directory, Entra Connect synchronization, and hybrid identity across cloud and on-premises environments.
- Manage endpoints with Intune and Jamf - Configure device management, compliance, and endpoint security policies through Microsoft Intune and Jamf.
- Administer Microsoft 365 - Manage Exchange Online, licensing, and broader Microsoft 365 services to keep collaboration secure and reliable.
- Automate configuration as code - Define and manage identity and infrastructure configuration using tools such as Terraform, AWS CDK, and SaltStack to make environments repeatable and auditable.
- Build CI/CD and automation pipelines - Replace manual administrative tasks with version-controlled automation and CI/CD pipelines (GitLab CI/CD, GitHub Actions).
- Script and build tooling - Develop automation in PowerShell, Python, or C# to streamline provisioning, reporting, and routine operations.
- Implement monitoring, alerting, and logging - Stand up observability and audit logging across identity, endpoints, and infrastructure using tools such as Prometheus and Grafana and native cloud tooling.
- Advance the DevOps operating model - Help mature standards, documentation, and engineering practices as the team moves from manual administration toward a DevOps operating model.
Knowledge, Skills, and Abilities- Microsoft Entra ID - Strong hands-on experience administering Entra ID (Azure AD): users, groups, roles, app registrations, and SSO.
- Access and identity security - Experience with conditional access, MFA, Privileged Identity Management (PIM), and just-in-time/privileged access tooling such as StrongDM.
- Hybrid identity - Experience with on-premises Active Directory and Entra Connect synchronization.
- Endpoint management - Hands-on experience with Microsoft Intune for device management and compliance.
- Microsoft 365 administration - Experience administering Microsoft 365, including Exchange Online and licensing.
- Infrastructure as code - Experience with, or a strong drive to grow into, IaC tools such as Terraform, AWS CDK, or SaltStack.
- CI/CD and version control - Familiarity with Git and CI/CD tooling (GitLab CI/CD, GitHub Actions) for automating configuration and deployments.
- Scripting and automation - Proficiency in PowerShell and at least one of Python or C# (C# preferred).
- Security mindset - Strong understanding of identity, access, and infrastructure security best practices.
- Problem-solving and communication - Excellent problem-solving skills and the ability to communicate clearly with both technical and non-technical stakeholders.
Nice to Have- Relevant Microsoft certifications (e.g., SC-300 Identity and Access Administrator, AZ-104, or equivalent)Experience automating
- Entra and Microsoft 365 administration with Microsoft Graph (PowerShell SDK or API)
- Experience supporting a transition from manual system administration to a DevOps / infrastructure-as-code model
- Exposure to AWS or other multi-cloud environments
- Experience with cryptocurrency, blockchain, or high-performance computing environments
- Experience in manufacturing, construction, energy, mining, data center, or other capital-intensive industries
What You'll Bring- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field - equivalent experience considered.
- 4+ years of experience in systems engineering, system administration, or identity and access administration.
- Hands-on experience with Microsoft Entra ID and/or Active Directory required.
- Microsoft or cloud certification preferred.
Why This Role MattersThis role is how Riot modernizes the way it runs systems. You won't just keep identity and devices running - you'll engineer them, turning manual administration into automated, version-controlled infrastructure. If you want to deepen your identity expertise while building real DevOps and automation skills, this role offers a clear path to do both and make a visible impact.
Compensation and Benefits- Competitive Salary: $115,000 - $135,000 (commensurate with experience) + bonus + sign-on equity grant
- 401(k) plan with company matching
- Great medical, vision, and dental plans to choose from
- Long-term and short-term disability
- Additional benefit options (Employee Assistance Program, Pet Insurance, and more)
- Flexible Spending Accounts
- Generous PTO and Paid Holidays
- A fun company culture with tremendous growth opportunities
