Senior IAM & Zero Trust Security Engineer

Match Group; Los Angeles (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical benefits

Mental health support

Wellness benefits

401k with employer match

Employee stock purchase program

Paid time off

Holidays

Training allowance

ERG membership opportunities

Parental leave

Job summary

Match Group in Palo Alto, CA is seeking a senior security engineer focused on identity and access management. You will own identity lifecycle, implement least-privilege controls, and collaborate across CorpSec and endpoint teams to harden access across our global portfolio.

Responsibilities include designing AuthN/AuthZ policies with Okta, managing NHIs, PAM/JIT, and building automated solutions using Python, Terraform, and IaC practices to scale security at speed.

Qualifications

• 7+ years in security engineering, IT engineering, or infrastructure with identity and access focus.
• Hands-on Okta: policy design, device assurance, FastPass, device trust, RBAC.
• Experience with Cloudflare Zero Trust or similar platform.
• Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM.
• Experience with IGA solutions (e.g., SailPoint), identity lifecycles and compliance.
• Experience securing non-human identities and guardrails for AI agents.
• IaC (Terraform) and GitOps with Python automation.

Responsibilities

• Drive a comprehensive identity and access lifecycle strategy for our global portfolio.
• Own and harden Cloudflare ZTNA policies and integrate with CorpSec.
• Integrate identity strategy with endpoint, SaaS, and vulnerability management.
• Automate scalable solutions using scripting, no-code tools, or AI to reduce toil.

Skills

Identity & Access

Okta

Cloudflare Zero Trust

SAML/OIDC/OAuth

IGA (SailPoint)

IaC (Terraform)

Python automation

AI tooling

GitOps

Tools

Okta Workflows

Lambda

Windmill

Job description

Match Group in Palo Alto, CA is seeking a senior security engineer focused on identity and access management. You will own identity lifecycle, implement least-privilege controls, and collaborate across CorpSec and endpoint teams to harden access across our global portfolio.

Responsibilities include designing AuthN/AuthZ policies with Okta, managing NHIs, PAM/JIT, and building automated solutions using Python, Terraform, and IaC practices to scale security at speed.