Senior Information Security Engineer

Match Group; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Mind & Body benefits

Financial wellness & 401k match

Generous PTO & holidays

Career development allowance

Parental leave & family resources

Company gatherings

Job summary

Match Group is seeking an IAM Manager to set strategic direction, elevate program maturity, and lead a team of IAM engineers. You will drive initiatives across Okta, OIG, SailPoint, and SailPoint lifecycles, focusing on automation, entitlement management, and secure authentication across our brands.

You will mentor a high-performing team, enforce least-privilege policies with Cloudflare Zero Trust, and collaborate with GRC to automate access reviews aligned to SOX, SOC 2, and ISO 27001.

Qualifications

• 8+ years in security engineering, IT engineering, or infrastructure, with at least 2+ years of direct people management or technical team leadership experience in IAM.
• Deep expertise in Okta, Okta Identity Governance (OIG), and SailPoint for lifecycle automation, entitlement management and modern authentication.
• Hands-on proficiency with Python, Terraform/IaC, and API/workflow automation for non-standard integrations.
• Proven track record of securing non-human identities (service accounts, tokens) and implementing AI agent safety guardrails.
• Strong working knowledge of core protocols: SAML, OIDC, OAuth 2.0, and SCIM.
• Practical use of AI tooling in your own workflow
• Experience with Cloudflare Zero Trust or a comparable platform

Responsibilities

• Define and execute a comprehensive identity and access management strategy across our global portfolio, guiding the team on key strategic priorities including authorization, authentication, non-human identities, and privileged access.
• Lead, mentor, and empower a high-performing IAM engineering team with emphasis on automation and operational excellence.
• Collaborate with CorpSec to enforce least-privilege policies via Cloudflare Zero Trust and modern identity-aware architectures.
• Partner with GRC to build automated User Access Review campaigns based on SOX, SOC 2, ISO 27001.

Skills

IAM engineering

People management

Okta

Okta Identity Governance

SailPoint

Python

Terraform/IaC

API/workflow automation

SAML/OIDC/OAuth 2.0/SCIM

Cloudflare Zero Trust

AI tooling

Tools

Jamf

CrowdStrike

Job description

Know where you belong!

Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire.

When it comes to dating, the connection starts online, but the real magic happens once you meet in real life (IRL). We think the same is true for creating the best platforms, so we work together IRL 3 days/week.

About the role

Match Group operates a unified security program protecting iconic brands including Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, and Pairs.

Our Enterprise Security organization consists of two key pillars: Identity & Access Management (IAM) and Corporate Security (CorpSec). As IAM Manager, you will set the strategic direction, elevate program maturity, and lead a talented team of IAM engineers. You will drive core initiatives across Okta, Okta Identity Governance (OIG), Okta Workflows, and SailPoint—focusing on advancing entitlement management, scaling automated identity lifecycle management, and building robust authentication.

What you'll do

• Define and execute a comprehensive identity and access management strategy across our global portfolio, guiding the team on key strategic priorities including:

  • Authorization & Governance (AuthZ): Enhance business agility and security through streamlined access requests, automated lifecycle provisioning/deprovisioning, role-based access controls (RBAC), and centralized certification campaigns using OIG and SailPoint.

  • Authentication & Device Posture (AuthN): Partner with CorpSec & IT to strengthen authentication controls by enforcing device trust, post-authentication threat detection, and modern protocol standards like DPoP.

  • Non-Human Identities & AI Agents: Establish lifecycle governance and security guardrails for non-human identities (service accounts, OAuth tokens, API keys) and emerging AI agent identities.

  • Privileged Access & Just-In-Time (JIT): Modernize privileged access management (PAM) and implement JIT access models to eliminate standing privileges for high risk access.

• Lead, mentor, and empower a high-performing team of IAM engineers, fostering a technical culture focused on automation, continuous learning, and operational excellence.

• Collaborate closely with CorpSec to enforce least-privilege policies via Cloudflare ZTNA, migrating legacy access controls toward modern identity-aware architectures.

• Partner with GRC to build automated User Access Review campaigns based on audit compliance frameworks (SOX, SOC 2, ISO 27001).

What we're looking for

• 8+ years in security engineering, IT engineering, or infrastructure, with at least 2+ years of direct people management or technical team leadership experience in IAM.

• Deep expertise in Okta, Okta Identity Governance (OIG), and SailPoint for lifecycle automation, entitlement management and modern authentication.

• Hands-on proficiency with Python, Terraform/IaC, and API/workflow automation for non-standard integrations.

• Proven track record of securing non-human identities (service accounts, tokens) and implementing AI agent safety guardrails.

• Strong working knowledge of core protocols: SAML, OIDC, OAuth 2.0, and SCIM.

• Practical use of AI tooling in your own workflow

• Experience with Cloudflare Zero Trust or a comparable platform

Nice to have

• Experience with MDM/EDR toolings (Jamf, CrowdStrike, or similar)

• Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)

• Experience working in global environments (EMEA/APAC)

Factors such as scope and responsibilities of the position, candidate's work experience, education/training, job-related skills, internal peer equity, as well as market and business considerations may influence base pay offered.

This salary range is reflective of Palo Alto, CA. For all other locations, this salary may be subject to a geographic adjustment (according to a specific city and state), if an authorization is granted to work outside of the location listed in this posting.

Why Match Group?

Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer.

• Mind & Body– Medical, mental health, and wellness benefits to support your overall health and well-being
• Financial Wellness– Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security
• Unplug – Generous PTO and 14 paid holidays so you can unplug
• Career– Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work
• Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts
• Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging!

We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company.