Senior Identity & Access Security Engineer - Zero Trust

Tinder; Palo Alto, Northern (CA, KY); Hybrid; USD 180,000 - 200,000; Full time

Benefits offered by this job

Medical & mental health

401k matching

Employee stock purchase

PTO & holidays

Parental leave

ERG membership opportunities

Team events and gatherings

Pet insurance

Job summary

Tinder, part of Match Group, is seeking a senior security engineer focused on identity and access. You will help secure our global portfolio, spanning Tinder, Hinge, Match, and more, by shaping authentication and authorization strategies and protecting non-human identities.

Based in Palo Alto, CA, this role emphasizes automated solutions, IaC, and cross-functional collaboration to advance our security posture while balancing business velocity.

Qualifications

• 7+ years in security engineering, IT engineering, or infrastructure with identity and access focus.
• Hands-on experience with Okta: policy design, device assurance, FastPass, device trust, RBAC.
• Experience with Cloudflare Zero Trust or a comparable platform.
• Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM.
• Experience with IGA solutions (Okta Identity Governance, SailPoint), including lifecycle and compliance requirements.
• Experience securing non-human identities (service accounts, OAuth apps, tokens) and establishing guardrails for AI agents.
• Experience with Terraform or other IaC tools to manage infrastructure changes, with a strong emphasis on GitOps.
• Practical use of Python for automation and workflows; AI tooling in workflows.

Responsibilities

• Drive identity and access lifecycle strategy across global portfolio.
• Enforce device trust, post-auth detection, and protections like DPoP.
• Enforce least privilege and right-size entitlements for security and velocity.
• Lead secure management for NHIs (service accounts, API keys) and guardrails for AI agents.
• Modernize PAM and implement JIT access to reduce standing privileges.
• Own and harden Cloudflare ZTNA policies.
• Integrate identity with CorpSec: endpoint signals, SaaS, vulnerability mgmt.
• Develop automated solutions using scripting, no-code, or AI to reduce toil.

Skills

Identity & access

Okta policy design

Cloudflare Zero Trust

SAML/OIDC/OAuth2/SCIM

IGA solutions

Terraform / IaC

GitOps

Python automation

AI tooling

Cross-functional influence

Non-human identities

Job description

Tinder, part of Match Group, is seeking a senior security engineer focused on identity and access. You will help secure our global portfolio, spanning Tinder, Hinge, Match, and more, by shaping authentication and authorization strategies and protecting non-human identities.

Based in Palo Alto, CA, this role emphasizes automated solutions, IaC, and cross-functional collaboration to advance our security posture while balancing business velocity.