Technical Product Owner

Location

Corporate Headquarters – One Park Square, Miami, FL ON-SITE

About El Car Wash

El Car Wash is South Florida's largest and fastest-growing express car wash company, operating 88+ locations across Florida and expansion markets. We are not just a car wash, we are a mini vacation on the side of the road. Behind that experience is a modern technology stack spanning Microsoft 365 and Azure, enterprise SaaS platforms, and a growing data and AI practice, all supporting roughly 1,300 team members across our sites and corporate office.

Position Summary

The Technical Product Analyst managed El Car Wash’s identity platform and core business applications, with a primary focus on IAM, Microsoft Entra ID, SSO, provisioning, and access governance across 60+ integrated apps.

This hands-on role also supports key platforms including Coupa, Docebo, Paycom, and Sage Intacct, working closely with business teams, IT, vendors, and managed services partners. The role translates business needs into technical requirements, manages integrations, automates joiner/mover/leaver processes, and keeps platforms secure, governed, and valuable.

The ideal candidate thinks like a product owner, works like an engineer, and treats identity as the security perimeter.

Key Responsibilities

Identity & Access Management (Primary Focus)

• Entra ID: own and administer Microsoft Entra ID: app registrations, enterprise applications, Conditional Access, MFA, and Privileged Identity Management (PIM)
• SSO & Federation: design, implement, and maintain SAML/OIDC single sign-on federations across the SaaS portfolio; onboard new applications to SSO and SCIM provisioning
• Lifecycle Automation: automate joiner/mover/leaver workflows between Paycom (HR source of truth), Entra ID, and downstream applications; drive group-based licensing and role-based access
• Access Governance: run periodic access reviews and recertification, enforce least privilege, support audits and cyber assessments, and maintain evidence for insurance and compliance requirements
• Security Partnership: partner with IT leadership and the MSP on identity-related security controls: legacy auth blocking, token protection, account decommissioning, and LAPS/privileged account hygiene

Enterprise Application Ownership

• Coupa: serve as technical product owner for procurement workflows, approval chains, supplier onboarding, punch-outs, and ERP integration
• Docebo: own platform configuration, course/catalog structure, user provisioning, and integrations with HR data for training assignment and compliance tracking
• Paycom: act as IT counterpart to HR for the HCM platform: SSO, API/file-based integrations, position and org data feeds, and onboarding automation
• Sage Intacct: support finance on ERP administration, user access, SSO, and integrations with Coupa, banking, and reporting platforms
• Integration & Release Management: maintain integration documentation, data flow maps, and runbooks; manage sandbox/production release cycles and UAT for platform changes

Product & Stakeholder Management

• Roadmap & Backlog: build and maintain a prioritized backlog and roadmap for identity and each owned platform; balance business requests, technical debt, and security requirements
• Requirements & Delivery: gather requirements from Finance, HR, Operations, and Training stakeholders; write user stories and acceptance criteria; lead UAT and change communication
• Vendor & SaaS Governance: manage vendor relationships, support escalations, renewals input, and SaaS governance data (licensing, usage, and app rationalization via the SaaS management platform)
• Metrics & Reporting: measure adoption and platform health; report status, risks, and KPIs to IT leadership on a regular cadence