Senior Information Security Engineer

Match Group; Vancouver; In loco; CAD 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

Mind & Body

Financial Wellness

Paid Time Off

Career Development

Family Benefits

Company Gatherings

Descrizione del lavoro

Match Group is seeking a security engineer focused on identity and access for its unified security program spanning Tinder, Hinge, Match and more. You will own identity lifecycle, design policy, and drive secure access across cloud and on‑prem environments while collaborating across CorpSec.

You will harden Cloudflare ZTNA, secure non-human identities, implement PAM/JIT, and build automated solutions using Python, IaC, and AI tools to scale security without slowing the business.

Competenze

• 7+ years in security engineering or IT infra focusing on identity and access.
• Deep hands-on Okta policy design and device assurance.
• Experience with Cloudflare Zero Trust.
• Strong knowledge of SAML, OIDC, OAuth 2.0, SCIM.
• Experience securing non-human identities and governance.
• IaC with Terraform; GitOps fluency.
• Automation using Python or similar; AI tooling usage.
• Ability to influence cross-functional outcomes.

Mansioni

• Drive identity and access lifecycle strategy for global portfolio.
• Implement NHIs and PAM/JIT.
• Own and harden Cloudflare ZTNA policies.
• Integrate identity with CorpSec: endpoint, SaaS, vulnerability mgmt.
• Build automated solutions to reduce manual toil and scale security.

Conoscenze

Okta policy design

Device assurance

FastPass

Device trust

RBAC

Cloudflare Zero Trust

SAML/OIDC/OAuth/SCIM

IGA solutions

Terraform / IaC

GitOps

Least privilege

Automation with Okta Workflows

Python scripting

AI tooling in workflow

Cross-functional influence

Strumenti

Terraform

Okta Workflows

Lambda

Windmill

Descrizione del lavoro

Know where you belong!

Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire.

When it comes to dating, the connection starts online, but the real magic happens once you meet in real life (IRL). We think the same is true for creating the best platforms, so we work together IRL 3 days/week.

About the role

Match Group runs one unified security program across Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, Pairs, and the rest of the portfolio. Enterprise Security owns the corporate attack surface: who gets access to what, on which device, from where.

Identity is the center of gravity for this role and where you will spend most of your time. Our Enterprise Security function is built on two core pillars—Identity & Access Security and CorpSec—and while this role is anchored in Identity & Access Security, you will work fluidly across boundaries. Because identity is so tightly coupled with other CorpSec domains—such as endpoint, SaaS, and data access—you will collaborate fluidly across both teams to drive a unified security strategy.

What you'll do

• Drive a comprehensive identity and access lifecycle strategy for our global portfolio, such as:
  • Authentication (AuthN): Drive identity security to the next level by enforcing device trust, post-auth detection, and DPoP.
  • Authorization (AuthZ): Enforce least privilege and right-size entitlement that balance security and velocity.
  • Non-Human & AI Agent Identity: Lead secure management for NHIs (e.g., OAuth tokens, service accounts, and API keys) and establish security guardrails for emerging AI agents and MCP connections.
  • Privileged Access Management (PAM) & Just-in-Time (JIT) Access: Modernize privileged access and implement JIT models to reduce standing privileges and secure high-risk administrative actions.
• Own and harden Cloudflare ZTNA policies and support transitioning from traditional network-based access model.
• Leverage your experience in broader enterprise security domains to ensure our identity strategy is integrated with our CorpSec efforts—device signals from endpoint posture (Fleet/EDR), SaaS security, and vulnerability management into our access controls to drive a unified security posture.
• Eliminate manual toil and accelerate delivery by engineering automated solutions—using scripting, no-code tools, or AI—to solve problems at scale rather than manually managing repetitive tasks.

What we're looking for

• 7+ years in security engineering, IT engineering, or infrastructure, with meaningful depth in identity and access
• Strong hands‑on experience with Okta: policy design, device assurance, FastPass, device trust, RBAC
• Experience with Cloudflare Zero Trust or a comparable platform
• Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM
• Experience with IGA solutions (e.g., Okta Identity Governance, SailPoint), including a deep understanding of identity lifecycles and compliance requirements.
• Experience securing non‑human identities (service accounts, OAuth apps, tokens) and establishing guardrails for AI agents; we value your thought process and perspective on these emerging challenges.
• Experience with using Terraform or other IaC tools to manage infrastructure changes, with a strong emphasis on GitOps fluency.
• Practical view of least privilege. You can right‑size access without introducing too much friction to the business.
• Experience building automated solutions (e.g., Okta Workflows, Lambda, Windmill) using Python or similar; you know when to automate for high impact and when to avoid it to prevent over‑engineering.
• Practical use of AI tooling in your own workflow
• Proven ability to influence cross‑functional outcomes, even without direct formal authority.
• Proactively identify, scope, and drive complex problems to completion.

Nice to have

• Endpoint management or EDR exposure (Jamf, CrowdStrike, or similar)
• Audit and compliance experience with access controls (SOX, PCI‑DSS, ISO 27001)
• Experience working in global environments (EMEA/APAC)

Factors such as scope and responsibilities of the position, candidate's work experience, education/training, job‑related skills, internal peer equity, as well as market and business considerations may influence base pay offered.

This salary range is reflective of Palo Alto, CA. For all other locations, this salary may be subject to a geographic adjustment (according to a specific city and state), if an authorization is granted to work outside of the location listed in this posting.

Why Match Group?

Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer:

• Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well‑being
• Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security
• Unplug – Generous PTO and 14 paid holidays so you can unplug
• Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work
• Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts
• Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging!

We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period.

If you require a reasonable accommodation to participate in the hiring process — such as during pre‑employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage.

#MG