Manager, IAM

• Know where you belong!
• Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire.

• When it comes to dating, the connection starts online, but the real magic happens once you meet in real life (IRL).  We think the same is true for creating the best platforms, so we work together IRL 3 days/week.
• About the role

Match Group operates a unified security program protecting iconic brands including Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, and Pairs.

Our Enterprise Security organization consists of two key pillars: Identity & Access Management (IAM) and Corporate Security (CorpSec). As IAM Manager, you will set the strategic direction, elevate program maturity, and lead a talented team of IAM engineers. You will drive core initiatives across Okta, Okta Identity Governance (OIG), Okta Workflows, and SailPoint—focusing on advancing entitlement management, scaling automated identity lifecycle management, and building robust authentication.

What you'll do

Define and execute a comprehensive identity and access management strategy across our global portfolio, guiding the team on key strategic priorities including:

Authorization & Governance (AuthZ)

Enhance business agility and security through streamlined access requests, automated lifecycle provisioning/deprovisioning, role-based access controls (RBAC), and centralized certification campaigns using OIG and SailPoint.

Authentication & Device Posture (AuthN)

Partner with CorpSec & IT to strengthen authentication controls by enforcing device trust, post-authentication threat detection, and modern protocol standards like DPoP.

Non-Human Identities & AI Agents

Establish lifecycle governance and security guardrails for non-human identities (service accounts, OAuth tokens, API keys) and emerging AI agent identities.

Privileged Access & Just-In-Time (JIT)

Modernize privileged access management (PAM) and implement JIT access models to eliminate standing privileges for high risk access.

Lead, mentor, and empower a high-performing team of IAM engineers, fostering a technical culture focused on automation, continuous learning, and operational excellence.

Collaborate closely with CorpSec to enforce least-privilege policies via Cloudflare ZTNA, migrating legacy access controls toward modern identity-aware architectures.

Partner with GRC to build automated User Access Review campaigns based on audit compliance frameworks (SOX, SOC 2, ISO 27001).

What we're looking for

8+ years in security engineering, IT engineering, or infrastructure, with at least 2+ years of direct people management or technical team leadership experience in IAM.

Deep expertise in Okta, Okta Identity Governance (OIG), and SailPoint for lifecycle automation, entitlement management and modern authentication.

Hands-on proficiency with Python, Terraform/IaC, and API/workflow automation for non-standard integrations.

Proven track record of securing non-human identities (service accounts, tokens) and implementing AI agent safety guardrails.

Strong working knowledge of core protocols: SAML, OIDC, OAuth 2.0, and SCIM.

Practical use of AI tooling in your own workflow

Experience with Cloudflare Zero Trust or a comparable platform

Nice to have

Experience with MDM/EDR toolings (Jamf, CrowdStrike, or similar)

Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)

Experience working in global environments (EMEA/APAC)

Factors such as scope and responsibilities of the position, candidate's work experience, education/training, job-related skills, internal peer equity, as well as market and business considerations may influence base pay offered.

This salary range is reflective of Palo Alto, CA. For all other locations, this salary may be subject to a geographic adjustment (according to a specific city and state), if an authorization is granted to work outside of the location listed in this posting.

Why Match Group?

Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer:

• Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being
• Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security
• Unplug – Generous PTO and 14 paid holidays so you can unplug
• Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work
• Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts
• Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging!

We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic.  Period.

If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage.

#MG