Senior Manager, IT Product Apps

Enphase Energy, Inc.; Bengaluru; Hybrid; INR 2,500,000 - 5,000,000; Full time

Job summary

Enphase Energy, Inc. in Bengaluru seeks a hands-on Digital Employee Experience leader to own Microsoft-centric technology across identity, access management, 365, Intune, and automation.

You will lead a team of 4, design and script while partnering with stakeholders on strategy and governance in a global, time-zone-flexible setup. The role is a player-coach, blending hands-on engineering with leadership, architecture, and vendor management, aiming to improve employee experience, security, and

Qualifications

• 10-15 years of progressive experience in Microsoft identity, digital workplace, and automation.
• At least 5 years hands-on engineering in Microsoft identity, 365, Intune, and automation.
• Proven player-coach track record leading Digital Workplace and End User Services.
• Deep hands-on experience with Active Directory, Entra ID, Entra Connect.
• Experience with HR-driven provisioning (Workday), SCIM, RBAC, and SSO.
• Experience with MFA, passwordless/FIDO2, Conditional Access, and PIM/PAM/JIT.
• Hands-on depth in Microsoft 365 across workloads and Intune, Autopilot, Cloud PC.
• Experience with Microsoft Purview and Defender email security.
• Strong scripting and automation skills: PowerShell, Graph API, Azure Functions, Power Automate, and RPA.
• ITIL-based service management with SLA/KPI ownership.
• Vendor, licensing costs, contracts, budgets management.
• SOX/SOC audits and IT general controls.
• Balance hands-on engineering with leadership, architecture, governance and planning.
• Jira and Jama Connect administration experience.
• Microsoft certifications related to Identity and Access Administration.
• ITIL 4 Foundation or higher.

Responsibilities

• Architect, administer, and troubleshoot hybrid identity: AD, Entra ID, Entra Connect.
• Build and manage identity lifecycle provisioning (Workday to AD and apps).
• Configure, integrate, and troubleshoot SSO and federation across 200+ apps.
• Configure SCIM-based provisioning across enterprise apps.
• Design RBAC models and Conditional Access policies.
• Lead MFA and passwordless strategy, and implement supporting policies.
• Administer privileged access: PIM, PAM, JIT.
• Run identity governance: access reviews, certifications, and segregation of duties.
• Hands-on Jira and Jama Connect administration as part of the digital employee experience.

Skills

Microsoft identity

Digital workplace

Automation

People leadership

Stakeholder management

Education

Microsoft certifications (SC-300, MD-102, MS-102)

ITIL 4 Foundation or higher

Tools

Jira (Software & Service Management)

Jama Connect

Job description

Description

Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.

Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!

About The Role

We are seeking an experienced hands-on Digital Employee Experience leader to own and evolve our Microsoft-centric technology spanning identity and access management, Microsoft 365, endpoint management, data protection, and enterprise automation. This is a player-coach role: you will personally design, build, configure, script, and troubleshoot across these platforms (expect roughly 60-70% hands-on technical work), while leading a team of 4 and partnering with stakeholders across the business on strategy and governance. The role reports to the Director of Infrastructure and offers a path to be developed as a potential successor to that role, based on performance and interest. This is a global role supporting teams in every region, requiring flexibility across time zones and a commitment to training and enabling local IT teams.

What you will do:

• Architect, administer, and troubleshoot hybrid identity: Active Directory, Microsoft Entra ID (Azure AD), and Entra Connect (Azure AD Connect), including directory health, sync architecture, and consolidation.
• Build and run identity lifecycle management (joiner-mover-leaver), including HR-driven provisioning such as Workday to Active Directory and downstream applications.
• Configure, integrate, and troubleshoot SSO and federation (SAML, OAuth, OIDC) across 200+ integrated applications.
• Configure and maintain SCIM-and API-based provisioning and de-provisioning across enterprise applications.
• Design and maintain RBAC models and Conditional Access policies.
• Lead MFA and passwordless (FIDO2) strategy, and personally design, configure, and roll out the supporting policies.
• Implement and administer privileged access: PIM, PAM, and just-in-time access.
• Run identity governance: access reviews, certification campaigns, and segregation of duties.

What Success Looks Like (First 6-12 Months)

• Establish credibility with the team, vendors, management, and internal customers by delivering visible, hands-on technical wins early.
• Build trusted working relationships with the team of 4 and regional IT teams, with clear priorities, standards, and ways of working.
• Strengthen vendor relationships with Microsoft, Atlassian, and MSP partners, holding them accountable to SLAs and commitments.
• Identify and deliver measurable cost savings across licensing, vendors, and tools through reclamation, right-sizing, and contract optimization.
• Deliver measurable improvements in employee experience, reflected in NPS, SLA performance, and sentiment trends.

Who you are and what you bring:

• 10-15 years of progressive experience across Microsoft identity, digital workplace, and automation functions, including at least 5 years of hands-on engineering in Microsoft identity, Microsoft 365, Intune, and automation (with hands-on work within the last 2-3 years), plus people leadership and cross-functional stakeholder management.
• Proven player-coach track record: personally engineering and operating Digital Workplace, Microsoft 365, Identity, Automation, and End User Services platforms while leading those functions.
• Deep hands-on experience with Active Directory, Entra ID, and Entra Connect in hybrid environments.
• Strong experience in identity lifecycle and governance: HR-driven provisioning (e.g., Workday), SCIM, RBAC, access reviews, and SSO (SAML/OAuth/OIDC).
• Experience with MFA, passwordless/FIDO2, Conditional Access, and PIM/PAM/JIT.
• Hands-on depth in Microsoft 365 across all workloads, and Intune across corporate, BYOD, and mobile devices, plus Autopilot and Cloud PC.
• Experience with Microsoft Purview and email security (Defender, mail flow, transport rules).
• Strong scripting and automation skills: PowerShell, Graph API, Azure Functions, Azure Automation Runbooks, Power Automate, and RPA, with production scripts or automations you have written and can walk through in detail.
• Strong ITIL-based service management experience with SLA/KPI ownership.
• Experience managing vendors, licensing costs, contracts, and budgets.
• Experience supporting SOX/SOC audits and IT general controls.
• Ability to balance hands-on engineering with people leadership, architecture, governance, and strategic planning, comfortable moving between roadmap discussions and the admin console in the same day, with the ability to lead both run-the-business operations and transformation initiatives.
• Hands-on administration of Jira (Software and Service Management), including workflows, schemes, automation rules, and integrations, as part of the digital employee experience.
• Hands-on administration of Jama Connect, including user and access management, project configuration, and integration with Jira.
• Microsoft certifications such as Identity and Access Administrator (SC-300), Endpoint Administrator (MD-102), or Microsoft 365 Administrator (MS-102).
• ITIL 4 Foundation or higher.