Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.
Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!
About the Role
We are seeking an experienced hands-on Digital Employee Experience leader to own and evolve our Microsoft-centric technology spanning identity and access management, Microsoft 365, endpoint management, data protection, and enterprise automation. This is a player-coach role: you will personally design, build, configure, script, and troubleshoot across these platforms (expect roughly 60–70% hands-on technical work), while leading a team of 4 and partnering with stakeholders across the business on strategy and governance. The role reports to the Director of Infrastructure and offers a path to be developed as a potential successor to that role, based on performance and interest. This is a global role supporting teams in every region, requiring flexibility across time zones and a commitment to training and enabling local IT teams.
What you will do:
- Architect, administer, and troubleshoot hybrid identity: Active Directory, Microsoft Entra ID (Azure AD), and Entra Connect (Azure AD Connect), including directory health, sync architecture, and consolidation.
- Build and run identity lifecycle management (joiner-mover-leaver), including HR-driven provisioning such as Workday to Active Directory and downstream applications.
- Configure, integrate, and troubleshoot SSO and federation (SAML, OAuth, OIDC) across 200+ integrated applications.
- Configure and maintain SCIM- and API-based provisioning and de-provisioning across enterprise applications.
- Design and maintain RBAC models and Conditional Access policies.
- Lead MFA and passwordless (FIDO2) strategy, and personally design, configure, and roll out the supporting policies.
- Implement and administer privileged access: PIM, PAM, and just-in-time (JIT) access.
- Run identity governance: access reviews, certification campaigns, and segregation of duties.
What Success Looks Like (First 6–12 Months)
- Establish credibility with the team, vendors, management, and internal customers by delivering visible, hands-on technical wins early.
- Build trusted working relationships with the team of 4 and regional IT teams, with clear priorities, standards, and ways of working.
- Strengthen vendor relationships with Microsoft, Atlassian, and MSP partners, holding them accountable to SLAs and commitments.
- Identify and deliver measurable cost savings across licensing, vendors, and tools through reclamation, right-sizing, and contract optimization.
- Deliver measurable improvements in employee experience, reflected in NPS, SLA performance, and sentiment trends.
Who you are and what you bring:
- 10–15 years of progressive experience across Microsoft identity, digital workplace, and automation functions, including at least 5 years of hands-on engineering in Microsoft identity, Microsoft 365, Intune, and automation (with hands-on work within the last 2–3 years), plus people leadership and cross-functional stakeholder management.
- Proven player-coach track record: personally engineering and operating Digital Workplace, Microsoft 365, Identity, Automation, and End User Services platforms while leading those functions.
- Deep hands-on experience with Active Directory, Entra ID, and Entra Connect in hybrid environments.
- Strong experience in identity lifecycle and governance: HR-driven provisioning (e.g., Workday), SCIM, RBAC, access reviews, and SSO (SAML/OAuth/OIDC).
- Experience with MFA, passwordless/FIDO2, Conditional Access, and PIM/PAM/JIT.
- Hands-on depth in Microsoft 365 across all workloads, and Intune across corporate, BYOD, and mobile devices, plus Autopilot and Cloud PC.
- Experience with Microsoft Purview and email security (Defender, mail flow, transport rules).
- Strong scripting and automation skills: PowerShell, Graph API, Azure Functions, Azure Automation Runbooks, Power Automate, and RPA, with production scripts or automations you have written and can walk through in detail.
- Strong ITIL-based service management experience with SLA/KPI ownership.
- Experience managing vendors, licensing costs, contracts, and budgets.
- Experience supporting SOX/SOC audits and IT general controls.
- Ability to balance hands-on engineering with people leadership, architecture, governance, and strategic planning, comfortable moving between roadmap discussions and the admin console in the same day, with the ability to lead both run-the-business operations and transformation initiatives.
- Hands-on administration of Jira (Software and Service Management), including workflows, schemes, automation rules, and integrations, as part of the digital employee experience.
- Hands-on administration of Jama Connect, including user and access management, project configuration, and integration with Jira.
- Microsoft certifications such as Identity and Access Administrator (SC-300), Endpoint Administrator (MD-102), or Microsoft 365 Administrator (MS-102).
- ITIL 4 Foundation or higher.