Manager, IAM

Match Group is hiring a Manager, IAM in Palo Alto, United States. It pays $180k-$200k a year and Level rates it ; you can apply on Match Group.

Level's read on this job

On Level's scale, this role is Little AI ●○○○: aI is not part of the work.
The posting mentions AI agents among its tools and skills.
Level classes it as a mid-level role.
Match Group has 59 other open roles on Level.

AI in this role

ai-agents

Know where you belong!

Match Group is a leading provider of dating products across the globe. Our portfolio includes Tinder, Hinge, Match, Meetic, PlentyOfFish, OkCupid, The League, HER, and others, each designed to spark meaningful connections for singles worldwide. Creating a sense of belonging doesn’t stop at our products - it’s the foundation of every team we hire.
When it comes to dating, the connection starts online, but the real magic happens once you meet in real life (IRL). We think the same is true for creating the best platforms, so we work together IRL 3 days/week.

About the role

Match Group operates a unified security program protecting iconic brands including Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, and Pairs.

Our Enterprise Security organization consists of two key pillars: Identity & Access Management (IAM) and Corporate Security (CorpSec). As IAM Manager, you will set the strategic direction, elevate program maturity, and lead a talented team of IAM engineers. You will drive core initiatives across Okta, Okta Identity Governance (OIG), Okta Workflows, and SailPoint—focusing on advancing entitlement management, scaling automated identity lifecycle management, and building robust authentication.

What you'll do

Define and execute a comprehensive identity and access management strategy across our global portfolio, guiding the team on key strategic priorities including:
- Authorization & Governance (AuthZ): Enhance business agility and security through streamlined access requests, automated lifecycle provisioning/deprovisioning, role-based access controls (RBAC), and centralized certification campaigns using OIG and SailPoint.
- Authentication & Device Posture (AuthN): Partner with CorpSec & IT to strengthen authentication controls by enforcing device trust, post-authentication threat detection, and modern protocol standards like DPoP.
- Non-Human Identities & AI Agents: Establish lifecycle governance and security guardrails for non-human identities (service accounts, OAuth tokens, API keys) and emerging AI agent identities.
- Privileged Access & Just-In-Time (JIT): Modernize privileged access management (PAM) and implement JIT access models to eliminate standing privileges for high risk access.
- Lead, mentor, and empower a high-performing team of IAM engineers, fostering a technical culture focused on automation, continuous learning, and operational excellence.
- Collaborate closely with CorpSec to enforce least-privilege policies via Cloudflare ZTNA, migrating legacy access controls toward modern identity-aware architectures.
- Partner with GRC to build automated User Access Review campaigns based on audit compliance frameworks (SOX, SOC 2, ISO 27001).

What we're looking for

8+ years in security engineering, IT engineering, or infrastructure, with at least 2+ years of direct people management or technical team leadership experience in IAM.
Deep expertise in Okta, Okta Identity Governance (OIG), and SailPoint for lifecycle automation, entitlement management and modern authentication.
Hands-on proficiency with Python, Terraform/IaC, and API/workflow automation for non-standard integrations.
Proven track record of securing non-human identities (service accounts, tokens) and implementing AI agent safety guardrails.
Strong working knowledge of core protocols: SAML, OIDC, OAuth 2.0, and SCIM.
Practical use of AI tooling in your own workflow
Experience with Cloudflare Zero Trust or a comparable platform

Nice to have

Experience with MDM/EDR toolings (Jamf, CrowdStrike, or similar)
Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)
Experience working in global environments (EMEA/APAC)

Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer: Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security Unplug – Generous PTO and 14 paid holidays so you can unplug Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging! We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage. #MG

How we rate this

Manager, IAM at Match Group rates 29 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.