Principal IT Systems Architect

Bloom Energy•San Jose, CA

2d•$155,800 - $224,200•Onsite

About The Position

Bloom Energy is seeking a Principal IT Systems Architect to define and lead enterprise infrastructure architecture across cloud, on-premises, identity, endpoint, virtualization, and SaaS environments. The role reports to the Senior Manager, Cloud Engineering and is based in San Jose, California. It is fully onsite, five days per week. The architect leads complex infrastructure initiatives from requirements and design through implementation, validation, documentation, operational handoff, and lifecycle management. The role establishes reliability, security, and operational standards; provides senior technical escalation; and partners with Cloud, Security, Network, Manufacturing, Application, and OT teams. It also advances automation and engineering standards, mentors technical staff, oversees vendor solutions and engagements, and provides architecture and governance for AWS and hybrid cloud environments. Bloom Energy develops solid oxide fuel cell and electrolyzer technologies for clean, reliable energy. The company states that its eligible employees receive a comprehensive benefits package and that compensation depends on factors including relevant skills and experience.

Requirements

12 or more years of experience in enterprise infrastructure, systems engineering, cloud engineering, or related disciplines, including significant experience designing and leading complex enterprise architectures.
Strong experience with Windows Server, Linux, Active Directory, Microsoft Entra ID, Microsoft 365, and virtualization technologies such as VMware.
Strong understanding of enterprise identity and access management, including SAML, OpenID Connect, OAuth, SCIM, MFA, privileged access, PKI, certificates, and identity federation.
Experience architecting or supporting enterprise endpoint management with platforms such as Microsoft Intune, Configuration Manager, and JAMF.
Strong understanding of backup, disaster recovery, business continuity, vulnerability management, patching, monitoring, and infrastructure security in large enterprise environments.
Deep technical knowledge of AWS and hybrid infrastructure, including AWS Organizations, Control Tower, IAM, networking, security controls, logging, compute, storage, backup, and multi-account environments.
Proven ability to automate infrastructure and operational processes using PowerShell, Python, Bash, APIs, and infrastructure-as-code technologies such as Terraform or CloudFormation.
Experience leading the technical design and resolution of complex, cross-platform infrastructure initiatives and production incidents.
Ability to translate business and technical requirements into architecture diagrams, engineering standards, implementation plans, operational models, and technical documentation.
Demonstrated ability to influence technical direction, mentor senior engineers, challenge design assumptions, and work across engineering, security, application, manufacturing, and business teams.
Experience reviewing vendor architectures, proposals, and statements of work and holding vendors accountable for technical design, security, supportability, and operational requirements.
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related discipline, or equivalent relevant professional experience.

Nice To Haves

Experience designing infrastructure for large-scale, highly available enterprise workloads spanning cloud and on-premises environments.
Experience with Zero Trust principles, enterprise security architecture, secrets management, centralized logging, SIEM integration, and security automation.
AWS, Microsoft, VMware, security, or architecture certifications are a plus but are not required.

Responsibilities

Define enterprise infrastructure architecture across AWS, on-premises, virtualization, Windows, Linux, identity, storage, backup, endpoint, and SaaS environments, including current-state, transitional, and target-state designs.
Lead complex infrastructure initiatives end-to-end, from requirements and architecture through implementation, validation, documentation, operational handoff, and lifecycle management.
Design and evolve enterprise identity and endpoint platforms, including Active Directory, Microsoft Entra ID, Microsoft 365, SAML, OIDC, OAuth, SCIM, PKI, privileged access, Intune, Configuration Manager, JAMF, Windows, and macOS management.
Establish infrastructure reliability, security, and operational standards for backup and recovery, disaster recovery, patching, vulnerability remediation, monitoring, administrative access, capacity management, incident response, and change control.
Serve as a senior technical escalation point for complex infrastructure issues and partner with Cloud, Security, Network, Manufacturing, Application, and OT teams on secure, resilient, supportable solutions.
Drive automation and engineering standards using PowerShell, Bash, Python, REST APIs, AWS CLI, Microsoft Graph, and infrastructure-as-code technologies.
Provide technical mentorship, architecture documentation, and oversight of vendor solutions and technical engagements.
Provide architecture and governance for AWS and hybrid cloud environments, including AWS Organizations, Control Tower, IAM, account provisioning, security guardrails, logging, tagging, workload isolation, and infrastructure as code.