> Markdown version of [/jobs/ext/3051447-senior-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/3051447-senior-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Engineer - **Company:** Match Inc - **Location:** Palo Alto, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Systems Engineering, User Authentication, Cloud Computing Security, Cyber Security, Identity and Access Management, Python (Programming Language), OAuth, OpenID, PCI Data Security Standards, Role-Based Access Control, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Vulnerability Management, Okta, Apache Spark, Infrastructure Automation Frameworks, No-code Tools, Cloudflare, Casper Suite, Virtual Agents, SailPoint, Terraform - **Published:** September 24, 2026 - **Apply:** https://www.jobmonkeyjobs.com/career/28046177/Senior-Information-Security-Engineer-California-Palo-Alto-7430 ## About the Role * 7+ years in security engineering, IT engineering, or infrastructure, with meaningful depth in identity and access * Strong hands-on experience with Okta: policy design, device assurance, FastPass, device trust, RBAC * Experience with Cloudflare Zero Trust or a comparable platform * Strong knowledge of SAML, OIDC, OAuth 2.0, and SCIM * Experience with IGA solutions (e.g., Okta Identity Governance, SailPoint), including a deep understanding of identity lifecycles and compliance requirements. * Experience securing non-human identities (service accounts, OAuth apps, tokens) and establishing guardrails for AI agents; we value your thought process and perspective on these emerging challenges. * Experience with using Terraform or other IaC tools to manage infrastructure changes, with a strong emphasis on GitOps fluency. * Practical view of least privilege. You can right-size access without introducing too much friction to the business. * Experience building automated solutions (e.g., Okta Workflows, Lambda, Windmill) using Python or similar; you know when to automate for high impact and when to avoid it to prevent over-engineering. * Practical use of AI tooling in your own workflow * Proven ability to influence cross-functional outcomes, even without direct formal authority. * Proactively identify, scope, and drive complex problems to completion. Nice to have * Endpoint management or EDR exposure (Jamf, CrowdStrike, or similar) * Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001) * Experience working in global environments (EMEA/APAC) ## Description * Drive a comprehensive identity and access lifecycle strategy for our global portfolio, such as: + Authentication (AuthN): Drive identity security to the next level by enforcing device trust, post-auth detection, and DPoP. + Authorization (AuthZ): Enforce least privilege and right-size entitlement that balance security and velocity. + Non-Human & AI Agent Identity: Lead secure management for NHIs (e.g., OAuth tokens, service accounts, and API keys) and establish security guardrails for emerging AI agents and MCP connections. + Privileged Access Management (PAM) & Just-in-Time (JIT) Access: Modernize privileged access and implement JIT models to reduce standing privileges and secure high-risk administrative actions. + Own and harden Cloudflare ZTNA policies and support transitioning from traditional network-based access model. + Leverage your experience in broader enterprise security domains to ensure our identity strategy is integrated with our CorpSec efforts-device signals from endpoint posture (Fleet/EDR), SaaS security, and vulnerability management into our access controls to drive a unified security posture. + Eliminate manual toil and accelerate delivery by engineering automated solutions-using scripting, no-code tools, or AI-to solve problems at scale rather than manually managing repetitive tasks., * Take the Lead: We don't ghost our work or each other. Just as users don't leave their matches hanging, we don't let each other down. * Move Fast: We have a bias for action and urgency. Something that could be done tomorrow would be better if done today. * Better Together: We keep connection at the heart of dating and at the heart of how we work. Just as our users are better when they connect with others, so are we when we collaborate. * Real Talk: We say the hard thing the human way. Just as we ask our users to behave with kindness and candor in our community, we expect all of us to do the same. * Safety First: We act with integrity, transparency, and consistency so people feel safe-whether they're swiping, matching, or working alongside us. * Spark Fun: We have fun to unlock creativity, fuel innovation, and help us build better experiences for daters. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)