Senior Manager, IT Product Apps

Enphase Energy is a global energy technology company and a leading provider of solar battery and electric vehicle charging products. Founded in 2006 our innovative microinverter technology revolutionized solar power making it a safer more reliable and scalable energy source. Today the Enphase Energy System enables users to make use save and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world with more than 80 million products shipped across 160 countries.

Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!

About the Role

We are seeking an experienced hands-on Digital Employee Experience leader to own and evolve our Microsoft-centric technology spanning identity and access management Microsoft 365 endpoint management data protection and enterprise automation. This is a player-coach role: you will personally design build configure script and troubleshoot across these platforms (expect roughly 6070% hands-on technical work) while leading a team of 4 and partnering with stakeholders across the business on strategy and governance. The role reports to the Director of Infrastructure and offers a path to be developed as a potential successor to that role based on performance and interest. This is a global role supporting teams in every region requiring flexibility across time zones and a commitment to training and enabling local IT teams.

What you will do:

• Architect administer and troubleshoot hybrid identity: Active Directory Microsoft Entra ID (Azure AD) and Entra Connect (Azure AD Connect) including directory health sync architecture and consolidation.
• Build and run identity lifecycle management (joiner-mover-leaver) including HR-driven provisioning such as Workday to Active Directory and downstream applications.
• Configure integrate and troubleshoot SSO and federation (SAML OAuth OIDC) across 200 integrated applications.
• Configure and maintain SCIM- and API-based provisioning and de-provisioning across enterprise applications.
• Design and maintain RBAC models and Conditional Access policies.
• Lead MFA and passwordless (FIDO2) strategy and personally design configure and roll out the supporting policies.
• Implement and administer privileged access: PIM PAM and just-in-time (JIT) access.
• Run identity governance: access reviews certification campaigns and segregation of duties.

What Success Looks Like (First 612 Months)

• Establish credibility with the team vendors management and internal customers by delivering visible hands-on technical wins early.
• Build trusted working relationships with the team of 4 and regional IT teams with clear priorities standards and ways of working.
• Strengthen vendor relationships with Microsoft Atlassian and MSP partners holding them accountable to SLAs and commitments.
• Identify and deliver measurable cost savings across licensing vendors and tools through reclamation right-sizing and contract optimization.
• Deliver measurable improvements in employee experience reflected in NPS SLA performance and sentiment trends.

Who you are and what you bring:

• 1015 years of progressive experience across Microsoft identity digital workplace and automation functions including at least 5 years of hands-on engineering in Microsoft identity Microsoft 365 Intune and automation (with hands-on work within the last 23 years) plus people leadership and cross-functional stakeholder management.
• Proven player-coach track record: personally engineering and operating Digital Workplace Microsoft 365 Identity Automation and End User Services platforms while leading those functions.
• Deep hands-on experience with Active Directory Entra ID and Entra Connect in hybrid environments.
• Strong experience in identity lifecycle and governance: HR-driven provisioning (e.g. Workday) SCIM RBAC access reviews and SSO (SAML/OAuth/OIDC).
• Experience with MFA passwordless/FIDO2 Conditional Access and PIM/PAM/JIT.
• Hands-on depth in Microsoft 365 across all workloads and Intune across corporate BYOD and mobile devices plus Autopilot and Cloud PC.
• Experience with Microsoft Purview and email security (Defender mail flow transport rules).
• Strong scripting and automation skills: PowerShell Graph API Azure Functions Azure Automation Runbooks Power Automate and RPA with production scripts or automations you have written and can walk through in detail.
• Strong ITIL-based service management experience with SLA/KPI ownership.
• Experience managing vendors licensing costs contracts and budgets.
• Experience supporting SOX/SOC audits and IT general controls.
• Ability to balance hands-on engineering with people leadership architecture governance and strategic planning comfortable moving between roadmap discussions and the admin console in the same day with the ability to lead both run-the-business operations and transformation initiatives.
• Hands-on administration of Jira (Software and Service Management) including workflows schemes automation rules and integrations as part of the digital employee experience.
• Hands-on administration of Jama Connect including user and access management project configuration and integration with Jira.
• Microsoft certifications such as Identity and Access Administrator (SC-300) Endpoint Administrator (MD-102) or Microsoft 365 Administrator (MS-102).
• ITIL 4 Foundation or higher.