EngineerJobs.io
← Back to all jobs
Match Group

Senior Information Security Engineer

Match Group
New York, NY $180k - $200k/yr Full time Posted 1d ago
Senior Agent Ai Security Device Trust Endpoint Security Identity and Access Management Identity Federation Information Security InfoSec Privileged Access Management Security Automation Single Sign On Zero Trust Security
Apply Now

Job Description

Match Group is hiring a Senior Information Security Engineer (onsite) in New York, NY to drive a unified identity and access security strategy across a global portfolio.

Responsibilities

  • Lead a comprehensive identity and access lifecycle strategy across the global portfolio
  • Authentication (AuthN): enhance identity security by enforcing device trust, enabling post-auth detection, and supporting DPoP
  • Authorization (AuthZ): apply least privilege and right-size entitlements to balance security with delivery velocity
  • Non-Human & AI Agent Identity: modernize secure handling for NHIs such as OAuth tokens, service accounts, and API keys
  • Establish security guardrails for emerging AI agents and MCP connections
  • PAM & Just-in-Time (JIT) access: modernize privileged access and implement JIT models to reduce standing privileges and secure high-risk admin actions
  • Own and harden Cloudflare ZTNA policies and support migration away from traditional network-based access patterns
  • Integrate identity strategy with broader CorpSec efforts by incorporating device signals from Fleet/EDR, SaaS security, and vulnerability management into access controls for a unified security posture
  • Reduce manual toil by engineering automated solutions using scripting, no-code tools, or AI to solve problems at scale

Requirements

  • 7+ years in security engineering, IT engineering, or infrastructure, with meaningful depth in identity and access
  • Strong hands-on experience with Okta, including policy design, device assurance, FastPass, device trust, and RBAC
  • Experience with Cloudflare Zero Trust or a comparable platform
  • Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM
  • Experience with IGA solutions (e.g., Okta Identity Governance, SailPoint), including deep understanding of identity lifecycles and compliance requirements
  • Experience securing non-human identities (service accounts, OAuth apps, tokens) and setting guardrails for AI agents
  • Experience using Terraform or other IaC tools to manage infrastructure changes, with emphasis on GitOps fluency
  • Practical approach to least privilege with the ability to right-size access without excessive friction to the business
  • Experience building automation (e.g., Okta Workflows, Lambda, Windmill) using Python or similar, with judgment on when to automate versus avoid over-engineering
  • Practical use of AI tooling in your own workflow
  • Proven ability to influence cross-functional outcomes without formal authority
  • Ability to proactively identify, scope, and drive complex problems to completion

Technologies

  • Okta
  • Cloudflare Zero Trust / Cloudflare ZTNA
  • SAML, OIDC, OAuth 2.0, SCIM
  • Okta Identity Governance, SailPoint
  • Terraform, GitOps
  • Okta Workflows, Lambda, Windmill
  • Python
  • Fleet/EDR
  • DPoP, RBAC
  • MCP

Nice to Have

  • Endpoint management or EDR exposure (Jamf, CrowdStrike, or similar)
  • Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)
  • Experience working in global environments (EMEA/APAC)

Core Values

  • Take the Lead: do not ghost work or each other
  • Move Fast: bias for action and urgency
  • Better Together: collaboration and connection
  • Real Talk: direct communication with kindness and candor
  • Safety First: integrity, transparency, and consistency
  • Spark Fun: unlock creativity and innovation

Compensation: USD 180,000 - 200,000 per year

Location: New York, NY (onsite)

Similar Jobs