Senior IAM Engineer: Identity & Access Security

Match; Los Angeles (CA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Mind & Body benefits

401k match

Employee stock purchase program

PTO and paid holidays

Professional development allowance

Parental leave and fertility/adoption

Job summary

Match Group seeks a senior security engineer focused on Identity & Access Security across its global brand portfolio. You will design and enforce authentication, authorization, and non-human identity controls while collaborating with CorpSec and endpoint teams.

Harden Cloudflare ZTNA policies, drive automation with Python, Terraform, and Okta Workflows, and ensure least privilege without slowing product velocity.

Qualifications

• 7+ years in security engineering, IT engineering, or infrastructure, with identity and access depth.
• Experience with Okta policy design, device assurance, FastPass, device trust, RBAC.
• Experience with Cloudflare Zero Trust or a comparable platform.
• Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM.
• Experience with IGA solutions (e.g., Okta Identity Governance, SailPoint).
• Experience securing non-human identities (service accounts, OAuth apps, tokens).
• Experience with Terraform or other IaC tools, GitOps fluency.
• Automation in Python or similar; use of AI tools in workflows.

Responsibilities

• Drive an identity and access lifecycle strategy for the global portfolio.
• Own and harden Cloudflare ZTNA policies and transition from traditional access models.
• Integrate identity strategy with CorpSec including endpoint, SaaS, and data access.
• Engineer automated solutions to reduce toil and scale operations.

Skills

Okta

Cloudflare Zero Trust

SAML/OIDC/OAuth 2.0

IGA

Terraform

GitOps

Python automation

Least privilege

Non-human identities

Automation workflows

Tools

Okta Workflows

Lambda

Windmill

Job description

Match Group seeks a senior security engineer focused on Identity & Access Security across its global brand portfolio. You will design and enforce authentication, authorization, and non-human identity controls while collaborating with CorpSec and endpoint teams.

Harden Cloudflare ZTNA policies, drive automation with Python, Terraform, and Okta Workflows, and ensure least privilege without slowing product velocity.