Principal IT Systems Architect

101 Bloom Energy; Concord (NH); On-site; USD 156,000 - 224,000; Full time

Benefits offered by this job

401(k) Retirement Plan with company-匹配

Mental Health Support services

Legal services

virtual Physical Therapy access

Fertility & Family Forming benefits

Competitive Medical, Dental, andVision

Job summary

Bloom Energy seeks a Principal IT Systems Architect to lead enterprise infrastructure architecture across AWS, on‑prem, and hybrid environments. You will own identity, endpoint management, security controls, and automation initiatives while guiding cross‑functional teams in Cloud, Security, Network, and OT.

The role emphasizes end-to-end design, governance, and incident resolution, with a focus on scalable, secure infrastructure and robust DR/BC plans. On-site in San Jose, CA.

Qualifications

• 12+ years of experience in enterprise infrastructure, systems engineering, cloud engineering, or related disciplines.
• Strong experience with Windows Server, Linux, Active Directory, Microsoft Entra ID, Microsoft 365, and virtualization technologies such as VMware.
• Strong understanding of enterprise identity and access management, including SAML, OpenID Connect, OAuth, SCIM, MFA, privileged access, PKI, certificates, and identity federation.
• Experience architecting or supporting enterprise endpoint management using platforms such as Microsoft Intune, Configuration Manager, and JAMF.
• Strong understanding of backup, disaster recovery, business continuity, vulnerability management, patching, monitoring, and infrastructure security in large enterprise environments.
• Deep technical knowledge of AWS and hybrid infrastructure, with experience across AWS Organizations, Control Tower, IAM, networking, security controls, logging, compute, storage, backup, and multi-account environments.
• Proven ability to automate infrastructure and operational processes using PowerShell, Python, Bash, APIs, and infrastructure-as-code technologies such as Terraform or CloudFormation.
• Experience leading the technical design and resolution of complex, cross-platform infrastructure initiatives and production incidents.
• Ability to translate business and technical requirements into architecture diagrams, engineering standards, implementation plans, operational models, and technical documentation.

Responsibilities

• Define enterprise infrastructure architecture across AWS, on-premises, virtualization, Windows, Linux, identity, storage, backup, endpoint, and SaaS environments.
• Lead complex infrastructure initiatives end-to-end, from requirements and architecture through implementation, validation, documentation, operational handoff, and lifecycle management.
• Design and evolve enterprise identity and endpoint platforms, including Active Directory, Microsoft Entra ID, Microsoft 365, SAML, OIDC, OAuth, SCIM, PKI, privileged access, Intune, Configuration Manager, JAMF, Windows, and macOS management.
• Establish infrastructure reliability, security, and operational standards covering backup and recovery, disaster recovery, patching, vulnerability remediation, monitoring, administrative access, capacity management, incident response, and change control.
• Serve as a senior technical escalation point for complex infrastructure issues and partner with Cloud, Security, Network, Manufacturing, Application, and OT teams to design secure, resilient, and supportable solutions.
• Drive automation and engineering standards using PowerShell, Bash, Python, REST APIs, AWS CLI, Microsoft Graph, and infrastructure-as-code technologies while providing technical mentorship, architecture documentation, and oversight of vendor solutions and technical engagements.
• Provide architecture and governance for AWS and hybrid cloud environments, including AWS Organizations, Control Tower, IAM, account provisioning, security guardrails, logging, tagging, workload isolation, and infrastructure as code.

Skills

Windows Server

Linux

Active Directory

Microsoft Entra ID

Microsoft 365

SAML

OIDC

OAuth

SCIM

MFA

PKI

Intune

Configuration Manager

JAMF

PowerShell

Python

Bash

AWS

Terraform

CloudFormation

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering

Tools

Terraform

CloudFormation

VMware

JAMF

Microsoft Entra ID

Job description

At Bloom Energy, our vision for a world powered by clean, reliable, and affordable energy is more than just a dream—we’re making it reality. For over two decades, we’ve been at the forefront of the global energy transition, pioneering solutions that empower critical industries to thrive in a rapidly digitizing, energy-intensive world. From revolutionizing power for AI-driven data centers to ensuring resilience for hospitals, electric grids, manufacturing facilities, and utilities, our solid oxide fuel cell (SOFC) and solid oxide electrolyzer (SOEC) technologies are redefining what’s possible by delivering energy abundance for all. With more than 30,000 fuel cell modules deployed worldwide, we are the trusted partner for Fortune 100 companies and innovators alike. Our cutting-edge solutions enable unparalleled “time-to-power” capabilities, reliability, and sustainability, ensuring our customers remain ahead in a world where soaring energy demand and intensifying energy scarcity are rapidly becoming the new norm. At Bloom, we thrive on collaboration, bold thinking, and relentless innovation. We believe that, together, we can create a brighter, more sustainable future while tackling the most pressing challenges of the 21st century. We are looking for a Principal IT Systems Architect to join our team in one of today’s most exciting technologies. This role will report to the Senior Manager, Cloud Engineering and will be based in San Jose, CA. This is a fully on-site, 5 days in office role.

Role Responsibilities

• Define enterprise infrastructure architecture across AWS, on-premises, virtualization, Windows, Linux, identity, storage, backup, endpoint, and SaaS environments, including current-state, transitional, and target-state designs.
• Lead complex infrastructure initiatives end-to-end, from requirements and architecture through implementation, validation, documentation, operational handoff, and lifecycle management.
• Design and evolve enterprise identity and endpoint platforms, including Active Directory, Microsoft Entra ID, Microsoft 365, SAML, OIDC, OAuth, SCIM, PKI, privileged access, Intune, Configuration Manager, JAMF, Windows, and macOS management.
• Establish infrastructure reliability, security, and operational standards covering backup and recovery, disaster recovery, patching, vulnerability remediation, monitoring, administrative access, capacity management, incident response, and change control.
• Serve as a senior technical escalation point for complex infrastructure issues and partner with Cloud, Security, Network, Manufacturing, Application, and OT teams to design secure, resilient, and supportable solutions.
• Drive automation and engineering standards using PowerShell, Bash, Python, REST APIs, AWS CLI, Microsoft Graph, and infrastructure-as-code technologies while providing technical mentorship, architecture documentation, and oversight of vendor solutions and technical engagements.
• Provide architecture and governance for AWS and hybrid cloud environments, including AWS Organizations, Control Tower, IAM, account provisioning, security guardrails, logging, tagging, workload isolation, and infrastructure as code.

Requirements

• 12+ years of experience in enterprise infrastructure, systems engineering, cloud engineering, or related disciplines, with significant experience designing and leading complex enterprise architectures.
• Strong experience with Windows Server, Linux, Active Directory, Microsoft Entra ID, Microsoft 365, and virtualization technologies such as VMware.
• Strong understanding of enterprise identity and access management, including SAML, OpenID Connect, OAuth, SCIM, MFA, privileged access, PKI, certificates, and identity federation.
• Experience architecting or supporting enterprise endpoint management using platforms such as Microsoft Intune, Configuration Manager, and JAMF.
• Strong understanding of backup, disaster recovery, business continuity, vulnerability management, patching, monitoring, and infrastructure security in large enterprise environments.
• Deep technical knowledge of AWS and hybrid infrastructure, with experience across AWS Organizations, Control Tower, IAM, networking, security controls, logging, compute, storage, backup, and multi-account environments.
• Proven ability to automate infrastructure and operational processes using PowerShell, Python, Bash, APIs, and infrastructure-as-code technologies such as Terraform or CloudFormation.
• Experience leading the technical design and resolution of complex, cross-platform infrastructure initiatives and production incidents.
• Ability to translate business and technical requirements into architecture diagrams, engineering standards, implementation plans, operational models, and technical documentation.
• Demonstrated ability to influence technical direction, mentor senior engineers, challenge design assumptions, and work across engineering, security, application, manufacturing, and business teams.
• Experience reviewing vendor architectures, proposals, and statements of work and holding vendors accountable for technical design, security, supportability, and operational requirements.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.

Preferred Qualifications

• Experience designing infrastructure for large-scale, highly available enterprise workloads spanning cloud and on-premises environments.
• Experience with Zero Trust principles, enterprise security architecture, secrets management, centralized logging, SIEM integration, and security automation.
• AWS, Microsoft, VMware, security, or architecture certifications are a plus but are not required.

Equal Opportunity Employment

Bloom Energy is an equal opportunity employer and makes employment decisions on the basis of merit. We are committed to compliance with all applicable laws providing equal employment opportunities. All qualified applicants, will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or on the basis of disability. Bloom Energy makes reasonable accommodations, consistent with applicable laws, for the known physical or mental limitations of an otherwise qualified applicant or employee with a disability, who can perform the essential job functions, unless undue hardship would result.

Benefits

• competitive Medical, Dental, and Vision plans with a large employer contribution
• a 401(k) Retirement Plan with company match
• generous Mental Health Support services
• Legal services
• virtual Physical Therapy access
• Fertility & Family Forming benefits

Compensation

Bloom Energy is committed to fair and equitable compensation practices. The total compensation for this position includes standard company benefits and is based on various factors including, but not limited to, relevant skills and experience. Salary Ranges: $155,800.00 - $224,200.00

Fraud Notice

We are aware there are instances where individuals are receiving job offers that fraudulently allege to be from Bloom Energy or one of our business units. This type of fraud can be carried out through false websites, or through fake e‑mails claiming to be from the company or social media. We never ask for personal information such as your bank account, Social Security numbers or National ID’s, via social media or chat-based applications, nor do we send or request payments for the purchase of business related equipment. If you suspect fraud, please report it to your local authorities immediately.

About Bloom Energy

Bloom Energy's mission is to make clean, reliable energy affordable for everyone in the world. With roots in NASA’s Mars Program, the company’s founder, chairman, and Chief Executive Officer, Dr. K.R. Sridhar, developed an innovative fuel cell technology that is shifting the energy paradigm and redefining the electric power market. The Bloom Energy Server is a distributed electric power solution built for the digital age and capable of delivering highly reliable, uninterrupted, 24x7 constant power that is also clean and sustainable. Bloom’s unique on-site power generation systems are among the most efficient on the planet, providing significantly reduced operating costs and producing dramatically lower greenhouse gas emissions. By generating power where it is consumed, Bloom Energy offers increased electrical reliability and improved energy security, providing a clear path to energy independence. Some of the largest companies in the world trust Bloom Energy to provide their businesses with clean, reliable and resilient energy. Bloom’s customers include many Fortune 100 companies and leaders in manufacturing, data centers, healthcare, retail, higher education, utilities, and other industries. The company, headquartered in San Jose, California, is growing quickly and looking to add to its dynamic team. Stay up to date with Bloom Energy through our social channels.