IAM Engineer
Share
Job Location:
Monthly Salary:
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Department:
Job Summary
Description
Enphase Energy is a global energy technology company and a leading provider of solar battery and electric vehicle charging products. Founded in 2006 our innovative microinverter technology revolutionized solar power making it a safer more reliable and scalable energy source. Today the Enphase Energy System enables users to make use save and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world with more than 80 million products shipped across 160 countries.
Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!
This role at Enphase requires working onsite 3 days a week with plans to transition back to a full 5 day in office schedule over time.
About role
We areseekingadedicated and detail-oriented IAM Engineerto join our Information Security team! This role is ideal for professionals passionate aboutidentity security governance zero-trust architecture and delivering secure scalable and user-friendly authentication solutions. You will play a key role indesigning deploying and managing IAM platforms and policiesto support secure access to enterprise and cloud systems while ensuring compliance with global security standards.
IAM Operations & Lifecycle Management:
- Manage andoperateend-to-end IAM processesincluding user provisioning de-provisioning andJoiner-Mover-Leaver (JML)lifecycle workflows
- Design andmaintainaccount lifecycle management forservice accounts privileged accounts andapplication identities
- Leadaccess certification campaignsprivileged access reviews andcontinuous access verification
- Implement and manageself-service IAM capabilities(e.g. account requests password resets access approvals) to improve user experience and reduce administrative overhead
- Define and enforceRole-Based Access Control (RBAC)Attribute-Based Access Control (ABAC) andleast-privilegemodels across all environments
Solution Design & Integration:
- Integrate with on-prem and cloud systems such asActive Directory Azure AD (IDP) LDAP AWS SSO and various SaaS platforms
- Enable secure access throughSingle Sign-On (SSO) Multi-Factor Authentication (MFA)andpassword lessauthentication
- SupportPrivileged Access Management (PAM)andEndpoint Privilege Management (EPM)through tools such asBeyondTrustorother market-leading IAM suites
- Implementautomated access request workflowsand integration with ITSDsystems
Security & Zero Trust Implementation:
- DeployZero Trust access policiesleveragingcontext-based controls(e.g. device posture geolocation user risk scores)
- Enableidentity threat detectionbehaviouralanalytics andadaptive authentication mechanisms
- Integrate IAM platforms withPAM/EPMtools to securehigh-risk rolesandcritical service accounts
- Support andmaintainpassword lessauthenticationtechnologies andidentity proofing workflowsfor remote and secure onboarding
Identity Governance:
- Define andmaintainautomated access provisioning/de-provisioningmulti-level approval workflows andpolicy enforcement
- Conductperiodic access reviewsacross applications infrastructure and databases
- Monitor IGA platforms for anomalies policy violations and risk indicators
Operations & Compliance:
- Monitor IAM infrastructure and services foravailability SLA adherence MFA adoption and compliance posture
- Ensure alignment withSOX SOC 2ISO 27001 SOC2 NIST CSF andorganizational policies
- IdentifyIAM risks document them in theIS Risk Register and work with risk teams for remediation
- Assistwith internal and external audits related to IAM IGA and privileged access controls
Stakeholder Engagement & Knowledge Sharing:
- Collaborate withregional IT teams InfoSec application owners andbusiness stakeholdersto ensure IAM strategy aligns with business objectives
- Promote adoption ofself-service capabilitiesto reduce operational overhead
- Develop andmaintainclear documentation architecture diagrams SOPs and user training materials
- Conduct IAM training awareness sessions and support onboarding for IT and end-users
Who you are and What you bring
Education:Bachelors degree inCybersecurity Information Security Computer Science or a related IT field with 3 years of experience
Hands-On Experience With:
- IAM tools:Microsoft Entra ID AWS IAM BeyondTrust (Password Safe PRA EPM)
- IGA platforms:Path Lockorother market-leading IAM suites
- Protocols & Standards:SAML 2.0 OAuth 2.0 OpenID Connect LDAP
- Directory Services:Active Directory Azure AD LDAP
- Scripting & Automation:Python Javaor Bash scripting for access automation and reporting
- Data Visualization:Grafana ELK Stack orIncortafor IAM dashboards and KPIs
- Compliance Frameworks:Strong understanding of SOX SOC2 ISO 27001 NIST CSF GDPR HIPAA
Good to Have:
- Hands-on experience with EDR SIEM/XDR platformssuch asCrowdStrike SecureWorks orELK Stackfor identity-related anomaly detection and monitoring
- Deep understanding of security controls and risk mitigationincloud (AWS Azure)andon-premises environments
- Exposure toZero Trust architecture implementationbeyond IAM includingnetwork segmentation device trust and continuous verification.
Soft Skills:
- Stronganalytical problem-solving andcritical thinkingcapabilities
- Clear concise and effectiveverbal and written communication skills
- Highly organized anddetail-oriented with strong documentation practices
- Ability tomanage multiple IAM projectssimultaneously in a dynamic fast-paced environment
- Proactive self-motivated and eager to stay current onIAM innovations and Zero Trust architectures
Key Skills
- ASP.NET
- Health Education
- Fashion Designing
- Fiber
- Investigation
About Company
Enphase is a global energy management technology company that provides residential and commercial solar plus storage solutions. We manufacture solutions spanning solar generation, energy storage, and web-based monitoring and control.
