Senior Identity & Access Security Engineer (IAM & AI)

PowerToFly; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Mind & Body

Financial Wellness

Unplug

Career

Family

Company Gatherings

Job summary

Match Group in Palo Alto, CA is seeking an Enterprise Security Engineer focused on Identity & Access Security to shape our global IAM posture. You will design policies for auth, access, and non-human identities, while collaborating across CorpSec and endpoints, SaaS, and data access to drive a unified security strategy.

You’ll automate security tasks with scripting or AI tools, implement least privilege, and work with Okta, Cloudflare Zero Trust, SAML, OIDC, OAuth 2.0, and IAM governance

Qualifications

• 7+ years in security engineering, IT engineering, or infrastructure with identity depth.
• Experience with Okta: policy design, device assurance, FastPass, device trust, RBAC.
• Experience with Cloudflare Zero Trust or similar.
• Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM.
• Experience with IGA solutions (Okta Identity Governance, SailPoint).
• Experience securing non-human identities (service accounts, OAuth apps, tokens).
• IaC tools (Terraform) and GitOps fluency.
• Automation using Python or similar; Okta Workflows, Lambda, Windmill.
• Practical use of AI tooling in workflow.

Responsibilities

• Drive a comprehensive identity and access lifecycle strategy for our global portfolio.
• Own and harden Cloudflare ZTNA policies and support transitioning to modern access models.
• Integrate identity strategy with CorpSec—device signals, SaaS security, and vulnerability management.
• Engineer automated solutions using scripting, no-code tools, or AI to scale security tasks.

Skills

Identity & Access Security

Okta

Cloudflare Zero Trust

SAML / OIDC / OAuth

IGA / Identity Governance

Non-human identities security

IaC / GitOps

Automation (Python)

AI tooling in workflow

Cross-functional collaboration

Job description

Match Group in Palo Alto, CA is seeking an Enterprise Security Engineer focused on Identity & Access Security to shape our global IAM posture. You will design policies for auth, access, and non-human identities, while collaborating across CorpSec and endpoints, SaaS, and data access to drive a unified security strategy.

You’ll automate security tasks with scripting or AI tools, implement least privilege, and work with Okta, Cloudflare Zero Trust, SAML, OIDC, OAuth 2.0, and IAM governance