IAM Engineer

Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.

Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!

This role at Enphase requires working onsite

3 days a week

, with plans to transition back to a full 5 day in office schedule over time.

About Role

We are seeking a dedicated and detail-oriented IAM Engineer to join our Information Security team! This role is ideal for professionals passionate about identity security, governance, zero-trust architecture, and delivering secure, scalable, and user-friendly authentication solutions. You will play a key role in designing, deploying, and managing IAM platforms and policies to support secure access to enterprise and cloud systems while ensuring compliance with global security standards.

IAM Operations & Lifecycle Management:

Manage and operate end-to-end IAM processes including user provisioning, de-provisioning, and Joiner-Mover-Leaver (JML) lifecycle workflows

Design and maintain account lifecycle management for service accounts, privileged accounts, and application identities

Lead access certification campaigns, privileged access reviews, and continuous access verification

Implement and manage self-service IAM capabilities (e.g., account requests, password resets, access approvals) to improve user experience and reduce administrative overhead

Define and enforce Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and least-privilege models across all environments

Solution Design & Integration:

Integrate with on-prem and cloud systems such as Active Directory, Azure AD (IDP), LDAP, AWS SSO, and various SaaS platforms

Enable secure access through Single Sign-On (SSO), Multi-Factor Authentication (MFA), and password less authentication

Support Privileged Access Management (PAM) and Endpoint Privilege Management (EPM) through tools such as Beyond Trust or other market-leading IAM suites

Implement automated access request workflows and integration with ITSD systems

Security & Zero Trust Implementation:

Deploy Zero Trust access policies leveraging context-based controls (e.g., device posture, geolocation, user risk scores)

Enable identity threat detection, behavioural analytics, and adaptive authentication mechanisms

Integrate IAM platforms with PAM/EPM tools to secure high-risk roles and critical service accounts

Support and maintain password less authentication technologies and identity proofing workflows for remote and secure onboarding

Identity Governance:

Define and maintain automated access provisioning/de-provisioning, multi-level approval workflows, and policy enforcement

Conduct periodic access reviews across applications, infrastructure, and databases

Monitor IGA platforms for anomalies, policy violations, and risk indicators

Operations & Compliance:

Monitor IAM infrastructure and services for availability, SLA adherence, MFA adoption, and compliance posture

Ensure alignment with SOX, SOC 2, ISO 27001, SOC2, NIST CSF, and organizational policies

Identify IAM risks, document them in the IS Risk Register, and work with risk teams for remediation

Assist with internal and external audits related to IAM, IGA, and privileged access controls

Stakeholder Engagement & Knowledge Sharing:

Collaborate with regional IT teams, InfoSec, application owners, and business stakeholders to ensure IAM strategy aligns with business objectives

Promote adoption of self-service capabilities to reduce operational overhead

Develop and maintain clear documentation, architecture diagrams, SOPs, and user training materials

Conduct IAM training, awareness sessions, and support onboarding for IT and end-users

Who You Are And What You Bring

Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related IT field with 3+ years of experience

IAM tools: Microsoft Entra ID, AWS IAM, Beyond Trust (Password Safe, PRA, EPM)

IGA platforms: Path Lock or other market-leading IAM suites

Protocols & Standards: SAML 2.0, OAuth 2.0, OpenID Connect, LDAP

Directory Services: Active Directory, Azure AD, LDAP

Scripting & Automation: Python, Java or Bash scripting for access automation and reporting

Data Visualization: Grafana, ELK Stack, or Incorta for IAM dashboards and KPIs

Compliance Frameworks: Strong understanding of SOX, SOC2, ISO 27001, NIST CSF, GDPR, HIPAA

Good to Have:

Hands-on experience with EDR, SIEM/XDR platforms such as CrowdStrike, SecureWorks, or ELK Stack for identity-related anomaly detection and monitoring

Deep understanding of security controls and risk mitigation in cloud (AWS, Azure) and on-premises environments

Exposure to Zero Trust architecture implementation beyond IAM, including network segmentation, device trust, and continuous verification.

Soft Skills:

Strong analytical, problem-solving, and critical thinking capabilities

Clear, concise, and effective verbal and written communication skills

Highly organized and detail-oriented, with strong documentation practices

Ability to manage multiple IAM projects simultaneously in a dynamic, fast-paced environment

Proactive, self-motivated, and eager to stay current on IAM innovations and Zero Trust architectures0

• Experience: 3+ years
• Seniority: Mid Level
• Education: Bachelor's degree required
• Languages: English