Technical Product Owner

The Technical Product Analyst managed El Car Wash’s identity platform and core business applications, with a primary focus on IAM, Microsoft Entra ID, SSO, provisioning, and access governance across 60+ integrated apps.

This hands-on role also supports key platforms including Coupa, Docebo, Paycom, and Sage Intacct, working closely with business teams, IT, vendors, and managed services partners. The role translates business needs into technical requirements, manages integrations, automates joiner/mover/leaver processes, and keeps platforms secure, governed, and valuable.

The ideal candidate thinks like a product owner, works like an engineer, and treats identity as the security perimeter., Identity & Access Management (Primary Focus)

• Entra ID: own and administer Microsoft Entra ID: app registrations, enterprise applications, Conditional Access, MFA, and Privileged Identity Management (PIM)
• SSO & Federation: design, implement, and maintain SAML/OIDC single sign-on federations across the SaaS portfolio; onboard new applications to SSO and SCIM provisioning
• Lifecycle Automation: automate joiner/mover/leaver workflows between Paycom (HR source of truth), Entra ID, and downstream applications; drive group-based licensing and role-based access
• Access Governance: run periodic access reviews and recertification, enforce least privilege, support audits and cyber assessments, and maintain evidence for insurance and compliance requirements
• Security Partnership: partner with IT leadership and the MSP on identity-related security controls: legacy auth blocking, token protection, account decommissioning, and LAPS/privileged account hygiene

Enterprise Application Ownership

• Coupa: serve as technical product owner for procurement workflows, approval chains, supplier onboarding, punch-outs, and ERP integration
• Docebo: own platform configuration, course/catalog structure, user provisioning, and integrations with HR data for training assignment and compliance tracking
• Paycom: act as IT counterpart to HR for the HCM platform: SSO, API/file-based integrations, position and org data feeds, and onboarding automation
• Sage Intacct: support finance on ERP administration, user access, SSO, and integrations with Coupa, banking, and reporting platforms
• Integration & Release Management: maintain integration documentation, data flow maps, and runbooks; manage sandbox/production release cycles and UAT for platform changes

Product & Stakeholder Management

• Roadmap & Backlog: build and maintain a prioritized backlog and roadmap for identity and each owned platform; balance business requests, technical debt, and security requirements
• Requirements & Delivery: gather requirements from Finance, HR, Operations, and Training stakeholders; write user stories and acceptance criteria; lead UAT and change communication
• Vendor & SaaS Governance: manage vendor relationships, support escalations, renewals input, and SaaS governance data (licensing, usage, and app rationalization via the SaaS management platform)
• Metrics & Reporting: measure adoption and platform health; report status, risks, and KPIs to IT leadership on a regular cadence, * Joiner/mover/leaver processes run with minimal manual touch, and access reviews pass audits cleanly
• Coupa, Docebo, Paycom, and Sage Intacct stakeholders have a clear roadmap, responsive support, and reliable integrations
• IT leadership has accurate visibility into application health, licensing, and identity risk at all times

3+ years in IT roles spanning application administration, identity management, or technical product ownership

• Hands-on expertise with Microsoft Entra ID (Azure AD): enterprise apps, app registrations, Conditional Access, MFA, PIM, and group-based licensing
• Strong working knowledge of SSO protocols and provisioning: SAML 2.0, OAuth 2.0/OIDC, and SCIM
• Direct administration experience with at least two of: Coupa, Docebo, Paycom, Sage Intacct (or closely comparable procurement, LMS, HCM, or ERP platforms)
• Experience building or managing integrations: REST APIs, SFTP/flat-file feeds, middleware, or iPaaS tools
• Proven ability to translate business requirements into technical specifications, manage a backlog, and drive projects to completion
• Strong documentation habits and communication skills with technical and non-technical audiences
• Comfort using AI tools such as Claude, Gemini, or Microsoft Copilot to improve productivity., * Microsoft certifications such as SC-300 (Identity and Access Administrator), MS-102, or AZ-104
• Experience in multi-site retail, hospitality, or consumer services environments with high-volume, deskless workforces
• Familiarity with Intune/MDM, Microsoft 365 administration, and PowerShell or Graph API automation
• Exposure to SaaS management/governance platforms, DLP tooling, and AI governance programs
• Experience supporting M&A application integration and identity consolidation
• Bilingual English/Spanish is a plus

Competitive salary and bonus, comprehensive health benefits, 401(k), free car washes (of course), and the chance to build modern identity and application practices at one of Florida’s fastest-growing consumer brands.

El Car Wash is South Florida’s largest and fastest-growing express car wash company, operating 88+ locations across Florida and expansion markets. We are not just a car wash, we are a mini vacation on the side of the road. Behind that experience is a modern technology stack spanning Microsoft 365 and Azure, enterprise SaaS platforms, and a growing data and AI practice, all supporting roughly 1,300 team members across our sites and corporate office.