Lever Hinge - Medium

Manager, IAM

Posted 23 Days Ago

Be an Early Applicant

Hybrid

2 Locations

180K-200K Annually

Senior level

Hybrid

2 Locations

180K-200K Annually

Senior level

Lead enterprise identity and access security across Match Group’s global portfolio. Design authentication, authorization, privileged access, zero-trust, non-human identity, and AI-agent security controls. Harden Cloudflare ZTNA and Okta environments, integrate endpoint and SaaS signals, and automate security workflows using infrastructure-as-code, scripting, and AI. Influence cross-functional stakeholders while driving complex security initiatives and maintaining least-privilege access.

The summary above was generated by AI

Know where you belong!
Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire.

When it comes to dating, the connection starts online, but the real magic happens once you meet in real life (IRL). We think the same is true for creating the best platforms, so we work together IRL 3 days/week.

About the role

Match Group operates a unified security program protecting iconic brands including Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, and Pairs.

Our Enterprise Security organization consists of two key pillars: Identity & Access Management (IAM) and Corporate Security (CorpSec). As IAM Manager, you will set the strategic direction, elevate program maturity, and lead a talented team of IAM engineers. You will drive core initiatives across Okta, Okta Identity Governance (OIG), Okta Workflows, and SailPoint—focusing on advancing entitlement management, scaling automated identity lifecycle management, and building robust authentication.

What you'll do

Define and execute a comprehensive identity and access management strategy across our global portfolio, guiding the team on key strategic priorities including:
- Authorization & Governance (AuthZ): Enhance business agility and security through streamlined access requests, automated lifecycle provisioning/deprovisioning, role-based access controls (RBAC), and centralized certification campaigns using OIG and SailPoint.
- Authentication & Device Posture (AuthN): Partner with CorpSec & IT to strengthen authentication controls by enforcing device trust, post-authentication threat detection, and modern protocol standards like DPoP.
- Non-Human Identities & AI Agents: Establish lifecycle governance and security guardrails for non-human identities (service accounts, OAuth tokens, API keys) and emerging AI agent identities.
- Privileged Access & Just-In-Time (JIT): Modernize privileged access management (PAM) and implement JIT access models to eliminate standing privileges for high risk access.
- Lead, mentor, and empower a high-performing team of IAM engineers, fostering a technical culture focused on automation, continuous learning, and operational excellence.
- Collaborate closely with CorpSec to enforce least-privilege policies via Cloudflare ZTNA, migrating legacy access controls toward modern identity-aware architectures.
- Partner with GRC to build automated User Access Review campaigns based on audit compliance frameworks (SOX, SOC 2, ISO 27001).

What we're looking for

8+ years in security engineering, IT engineering, or infrastructure, with at least 2+ years of direct people management or technical team leadership experience in IAM.
Deep expertise in Okta, Okta Identity Governance (OIG), and SailPoint for lifecycle automation, entitlement management and modern authentication.
Hands-on proficiency with Python, Terraform/IaC, and API/workflow automation for non-standard integrations.
Proven track record of securing non-human identities (service accounts, tokens) and implementing AI agent safety guardrails.
Strong working knowledge of core protocols: SAML, OIDC, OAuth 2.0, and SCIM.
Practical use of AI tooling in your own workflow
Experience with Cloudflare Zero Trust or a comparable platform

Nice to have

Experience with MDM/EDR toolings (Jamf, CrowdStrike, or similar)
Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)
Experience working in global environments (EMEA/APAC)

Why Match Group?

Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer:

Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being

Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security

Unplug – Generous PTO and 14 paid holidays so you can unplug

Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work

Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts

Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging!

We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period.

If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage.

#MG

What you need to know about the San Francisco Tech Scene

San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.

Key Facts About San Francisco Tech

Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
Major Tech Employers: Google, Apple, Salesforce, Meta
Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine