> Markdown version of [/jobs/ext/4617921-manager-iam](https://www.wearedevelopers.com/jobs/ext/4617921-manager-iam). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Manager, IAM

- **Company:** Match Group
- **Location:** Los Angeles, CA, United States
- **Experience:** Experienced
- **Salary:** $10,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Systems Engineering, User Authentication, Identity and Access Management, Python (Programming Language), OAuth, OpenID, PCI Data Security Standards, Role-Based Access Control, Zero Trust Network Access, Security Assertion Markup Language (SAML), User Provisioning Software, Okta, Agentic-AI, Cloudflare, Casper Suite, Virtual Agents, SailPoint, Terraform
- **Published:** November 7, 2026
- **Apply:** https://www.thejobnetwork.com/job/05c7e156-0475-4a32-be18-2cecdedcc6ee/manager-iam

## About the Role

* 8+ years in security engineering, IT engineering, or infrastructure, with at least 2+ years of direct people management or technical team leadership experience in IAM.
 * Deep expertise in Okta, Okta Identity Governance (OIG), and SailPoint for lifecycle automation, entitlement management and modern authentication.
 * Hands-on proficiency with Python, Terraform/IaC, and API/workflow automation for non-standard integrations.
 * Proven track record of securing non-human identities (service accounts, tokens) and implementing AI agent safety guardrails.
 * Strong working knowledge of core protocols: SAML, OIDC, OAuth 2.0, and SCIM.
 * Practical use of AI tooling in your own workflow
 * Experience with Cloudflare Zero Trust or a comparable platform

Nice to have

 * Experience with MDM/EDR toolings (Jamf, CrowdStrike, or similar)
 * Audit and compliance experience with access controls (SOX, PCI-DSS, ISO 27001)
 * Experience working in global environments (EMEA/APAC)

Factors such as scope and responsibilities of the position, candidate's work experience, education/training, job-related skills, internal peer equity, as well as market and business considerations may influence base pay offered.

## Description

Match Group operates a unified security program protecting iconic brands including Tinder, Hinge, Match, Meetic, OkCupid, Plenty of Fish, Azar, and Pairs.

Our Enterprise Security organization consists of two key pillars: Identity & Access Management (IAM) and Corporate Security (CorpSec). As IAM Manager, you will set the strategic direction, elevate program maturity, and lead a talented team of IAM engineers. You will drive core initiatives across Okta, Okta Identity Governance (OIG), Okta Workflows, and SailPoint-focusing on advancing entitlement management, scaling automated identity lifecycle management, and building robust authentication.

What you'll do

 * Define and execute a comprehensive identity and access management strategy across our global portfolio, guiding the team on key strategic priorities including:
 + Authorization & Governance (AuthZ): Enhance business agility and security through streamlined access requests, automated lifecycle provisioning/deprovisioning, role-based access controls (RBAC), and centralized certification campaigns using OIG and SailPoint.
 + Authentication & Device Posture (AuthN): Partner with CorpSec & IT to strengthen authentication controls by enforcing device trust, post-authentication threat detection, and modern protocol standards like DPoP.
 + Non-Human Identities & AI Agents: Establish lifecycle governance and security guardrails for non-human identities (service accounts, OAuth tokens, API keys) and emerging AI agent identities.
 + Privileged Access & Just-In-Time (JIT): Modernize privileged access management (PAM) and implement JIT access models to eliminate standing privileges for high risk access.
 * Lead, mentor, and empower a high-performing team of IAM engineers, fostering a technical culture focused on automation, continuous learning, and operational excellence.
 * Collaborate closely with CorpSec to enforce least-privilege policies via Cloudflare ZTNA, migrating legacy access controls toward modern identity-aware architectures.
 * Partner with GRC to build automated User Access Review campaigns based on audit compliance frameworks (SOX, SOC 2, ISO 27001).