Sobre este puesto de Manager, IAM en Matchgroup
Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire.
About the role
Match Group operates a unified security program protecting iconic brands including Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, and Pairs.
Our Enterprise Security organization consists of two key pillars: Identity & Access Management (IAM) and Corporate Security (CorpSec). As IAM Manager, you will set the strategic direction, elevate program maturity, and lead a talented team of IAM engineers. You will drive core initiatives across Okta, Okta Identity Governance (OIG), Okta Workflows, and SailPoint—focusing on advancing entitlement management, scaling automated identity lifecycle management, and building robust authentication.
What you'll do
-
Define and execute a comprehensive identity and access management strategy across our global portfolio, guiding the team on key strategic priorities including:
-
Authorization & Governance (AuthZ): Enhance business agility and security through streamlined access requests, automated lifecycle provisioning/deprovisioning, role-based access controls (RBAC), and centralized certification campaigns using OIG and SailPoint.
-
Authentication & Device Posture (AuthN): Partner with CorpSec & IT to strengthen authentication controls by enforcing device trust, post-authentication threat detection, and modern protocol standards like DPoP.
-
Non-Human Identities & AI Agents: Establish lifecycle governance and security guardrails for non-human identities (service accounts, OAuth tokens, API keys) and emerging AI agent identities.
-
Privileged Access & Just-In-Time (JIT): Modernize privileged access management (PAM) and implement JIT access models to eliminate standing privileges for high risk access.
-
Lead, mentor, and empower a high-performing team of IAM engineers, fostering a technical culture focused on automation, continuous learning, and operational excellence.
-
Collaborate closely with CorpSec to enforce least-privilege policies via Cloudflare ZTNA, migrating legacy access controls toward modern identity-aware architectures.
-
Partner with GRC to build automated User Access Review campaigns based on audit compliance frameworks (SOX, SOC 2, ISO 27001).
-
What we're looking for
-
8+ years in security engineering, IT engineering, or infrastructure, with at least 2+ years of direct people management or technical team leadership experience in IAM.
-
Deep expertise in Okta, Okta Identity Governance (OIG), and SailPoint for lifecycle automation, entitlement management and modern authentication.
-
Hands-on proficiency with Python, Terraform/IaC, and API/workflow automation for non-standard integrations.
-
Proven track record of securing non-human identities (service accounts, tokens) and implementing AI agent safety guardrails.
-
Strong working knowledge of core protocols: SAML, OIDC, OAuth 2.0, and SCIM.
-
Practical use of AI tooling in your own workflow
-
Experience with Cloudflare Zero Trust or a comparable platform
Nice to have
-
Experience with MDM/EDR toolings (Jamf, CrowdStrike, or similar)
-
Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)
-
Experience working in global environments (EMEA/APAC)
