Senior IT Systems Architect - Enterprise Cloud & Security

101 Bloom Energy; Concord (NH); On-site; USD 156,000 - 224,000; Full time

Benefits offered by this job

401(k) Retirement Plan with company-匹配

Mental Health Support services

Legal services

virtual Physical Therapy access

Fertility & Family Forming benefits

Competitive Medical, Dental, andVision

Job summary

Bloom Energy seeks a Principal IT Systems Architect to lead enterprise infrastructure architecture across AWS, on‑prem, and hybrid environments. You will own identity, endpoint management, security controls, and automation initiatives while guiding cross‑functional teams in Cloud, Security, Network, and OT.

The role emphasizes end-to-end design, governance, and incident resolution, with a focus on scalable, secure infrastructure and robust DR/BC plans. On-site in San Jose, CA.

Qualifications

• 12+ years of experience in enterprise infrastructure, systems engineering, cloud engineering, or related disciplines.
• Strong experience with Windows Server, Linux, Active Directory, Microsoft Entra ID, Microsoft 365, and virtualization technologies such as VMware.
• Strong understanding of enterprise identity and access management, including SAML, OpenID Connect, OAuth, SCIM, MFA, privileged access, PKI, certificates, and identity federation.
• Experience architecting or supporting enterprise endpoint management using platforms such as Microsoft Intune, Configuration Manager, and JAMF.
• Strong understanding of backup, disaster recovery, business continuity, vulnerability management, patching, monitoring, and infrastructure security in large enterprise environments.
• Deep technical knowledge of AWS and hybrid infrastructure, with experience across AWS Organizations, Control Tower, IAM, networking, security controls, logging, compute, storage, backup, and multi-account environments.
• Proven ability to automate infrastructure and operational processes using PowerShell, Python, Bash, APIs, and infrastructure-as-code technologies such as Terraform or CloudFormation.
• Experience leading the technical design and resolution of complex, cross-platform infrastructure initiatives and production incidents.
• Ability to translate business and technical requirements into architecture diagrams, engineering standards, implementation plans, operational models, and technical documentation.

Responsibilities

• Define enterprise infrastructure architecture across AWS, on-premises, virtualization, Windows, Linux, identity, storage, backup, endpoint, and SaaS environments.
• Lead complex infrastructure initiatives end-to-end, from requirements and architecture through implementation, validation, documentation, operational handoff, and lifecycle management.
• Design and evolve enterprise identity and endpoint platforms, including Active Directory, Microsoft Entra ID, Microsoft 365, SAML, OIDC, OAuth, SCIM, PKI, privileged access, Intune, Configuration Manager, JAMF, Windows, and macOS management.
• Establish infrastructure reliability, security, and operational standards covering backup and recovery, disaster recovery, patching, vulnerability remediation, monitoring, administrative access, capacity management, incident response, and change control.
• Serve as a senior technical escalation point for complex infrastructure issues and partner with Cloud, Security, Network, Manufacturing, Application, and OT teams to design secure, resilient, and supportable solutions.
• Drive automation and engineering standards using PowerShell, Bash, Python, REST APIs, AWS CLI, Microsoft Graph, and infrastructure-as-code technologies while providing technical mentorship, architecture documentation, and oversight of vendor solutions and technical engagements.
• Provide architecture and governance for AWS and hybrid cloud environments, including AWS Organizations, Control Tower, IAM, account provisioning, security guardrails, logging, tagging, workload isolation, and infrastructure as code.

Skills

Windows Server

Linux

Active Directory

Microsoft Entra ID

Microsoft 365

SAML

OIDC

OAuth

SCIM

MFA

PKI

Intune

Configuration Manager

JAMF

PowerShell

Python

Bash

AWS

Terraform

CloudFormation

Education

Bachelor’s degree in Computer Science, Information Technology, Engineering

Tools

Terraform

CloudFormation

VMware

JAMF

Microsoft Entra ID

Job description

Bloom Energy seeks a Principal IT Systems Architect to lead enterprise infrastructure architecture across AWS, on‑prem, and hybrid environments. You will own identity, endpoint management, security controls, and automation initiatives while guiding cross‑functional teams in Cloud, Security, Network, and OT.

The role emphasizes end-to-end design, governance, and incident resolution, with a focus on scalable, secure infrastructure and robust DR/BC plans. On-site in San Jose, CA.