📋 Job Overview
Know where you belong! Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire.
When it comes to dating, the connection starts online, but the real magic happens once you meet in real life (IRL). We think the same is true for creating the best platforms, so we work together IRL 3 days/week.
🏢 About Match Group
Match Group runs one unified security program across Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, Pairs, and the rest of the portfolio. Enterprise Security owns the corporate attack surface: who gets access to what, on which device, from where.
Identity is the center of gravity for this role and where you will spend most of your time. Our Enterprise Security function is built on two core pillars—Identity & Access Security and CorpSec—and while this role is anchored in Identity & Access Security, you will work fluidly across boundaries. Because identity is so tightly coupled with other CorpSec domains—such as endpoint, SaaS, and data access—you will collaborate fluidly across both teams to drive a unified security strategy.
🎯 The Role
Drive a comprehensive identity and access lifecycle strategy for our global portfolio, such as:
- Authentication (AuthN): Drive identity security to the next level by enforcing device trust, post-auth detection, and DPoP.
- Authorization (AuthZ): Enforce least privilege and right-size entitlement that balance security and velocity.
- Non-Human & AI Agent Identity: Lead secure management for NHIs (e.g., OAuth tokens, service accounts, and API keys) and establish security guardrails for emerging AI agents and MCP connections.
- Privileged Access Management (PAM) & Just-in-Time (JIT) Access: Modernize privileged access and implement JIT models to reduce standing privileges and secure high-risk administrative actions.
Own and harden Cloudflare ZTNA policies and support transitioning from traditional network-based access model.
Leverage your experience in broader enterprise security domains to ensure our identity strategy is integrated with our CorpSec efforts—device signals from endpoint posture (Fleet/EDR), SaaS security, and vulnerability management into our access controls to drive a unified security posture.
Eliminate manual toil and accelerate delivery by engineering automated solutions—using scripting, no-code tools, or AI—to solve problems at scale rather than manually managing repetitive tasks.
✅ Key Responsibilities
- Drive a comprehensive identity and access lifecycle strategy for our global portfolio, including authentication, authorization, non-human identity, and privileged access management.
- Own and harden Cloudflare ZTNA policies and support transitioning from traditional network-based access model.
- Leverage broader enterprise security domains to integrate identity strategy with CorpSec efforts.
- Eliminate manual toil by engineering automated solutions to solve problems at scale.
📌 Required Qualifications
- 7+ years in security engineering, IT engineering, or infrastructure, with meaningful depth in identity and access
- Strong hands-on experience with Okta: policy design, device assurance, FastPass, device trust, RBAC
- Experience with Cloudflare Zero Trust or a comparable platform
⭐ Desirable Experience
- Experience with broader enterprise security domains such as endpoint, SaaS, and data access
- Experience with scripting, no-code tools, or AI for automation
🎁 Benefits
Competitive
🛂 Visa & Eligibility
No information provided.
