Senior Identity & Access Security Engineer

Match Group; Palo Alto, Northern (CA, KY); Hybrid; USD 180,000 - 200,000; Full time

Job summary

Match Group is seeking an experienced security engineer focused on identity and access across Tinder, Hinge, Match, and portfolio apps. You will own the identity lifecycle, enforce least privilege, and harden Cloudflare ZTNA policies to secure global access.

You will collaborate across CorpSec, endpoint, and data access teams, building automated solutions with Python and IaC tooling to scale security while reducing manual toil.

Qualifications

• 7+ years in security engineering, IT engineering, or infrastructure.
• Strong hands-on experience with Okta: policy design, device assurance, FastPass, device trust, RBAC.
• Experience with Cloudflare Zero Trust or a comparable platform.
• Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM.
• Experience with IGA solutions (Okta Identity Governance, SailPoint) and identity lifecycles.
• Experience securing non-human identities (service accounts, OAuth apps, tokens) and guardrails for AI agents.
• Experience with Terraform or other IaC tools and GitOps fluency.
• Practical view of least privilege and right-sizing access.
• Experience building automated solutions using Python, Okta Workflows, Lambda, Windmill.
• Practical use of AI tooling in workflow.
• Proven ability to influence cross-functional outcomes.

Responsibilities

• Drive a comprehensive identity and access lifecycle strategy for our global portfolio.
• Own and harden Cloudflare ZTNA policies and support transitioning from traditional access models.
• Integrate identity strategy with CorpSec across endpoint, SaaS, and vulnerability management.
• Automate solutions to reduce manual toil and scale operations.

Skills

Identity & Access Security

Okta policy design

Device trust

RBAC

SAML/OIDC/OAuth 2.0

SCIM

Terraform / IaC

GitOps

Python automation

AI tooling

Cross-functional influence

Non-human identities

Tools

Cloudflare Zero Trust

Job description

Match Group is seeking an experienced security engineer focused on identity and access across Tinder, Hinge, Match, and portfolio apps. You will own the identity lifecycle, enforce least privilege, and harden Cloudflare ZTNA policies to secure global access.

You will collaborate across CorpSec, endpoint, and data access teams, building automated solutions with Python and IaC tooling to scale security while reducing manual toil.