Status: Exempt (Salaried)

Department: IT - 115

Position Summary

Under the Direction of the Director of Global Infrastructure Operations, this position will be responsible for managing and maintaining Azure cloud-based environments, database, network and storage infrastructure for our new Azure and AWS cloud platforms. This role will be responsible for creating, building, maintaining, monitoring, and reporting status of these platforms ensuring continuous service and uptime for Plug. This role will recommend and maintain standard cloud structures and environments, procedures, templates, and backup jobs for all critical environments. The role will be responsible to maintain artifacts and report environment standards/practices for all SOX and internal audit requirements.

Core Duties and Responsibilities

1. Manage Azure Identities and Governance

* Manage Azure Active Directory (Azure AD) objects.

- create users and groups

- create administrative units

- manage user and group properties

- manage device settings

- perform bulk user updates

- manage guest accounts

- configure Azure AD Join

- configure self-service password reset

* Manage role-based access control (RBAC)

- create a custom role

- provide access to Azure resources by assigning roles at different scopes

- interpret access assignments

* Manage subscriptions and governance.

- configure Azure policies

- configure resource locks

- apply and manage tags on resources

- manage resource groups

- manage subscriptions

- manage costs

- configure management groups

2. Implement and Manage Storage

* Secure storage

- configure network access to storage accounts

- create and configure storage accounts

- generate shared access signature (SAS) tokens

- manage access keys

- configure Azure AD Authentication for a storage account

- configure access to Azure Files

* Manage Storage

- export from Azure job

- import into Azure job

- install and use Azure Storage Explorer

- copy data by using AZ Copy

- implement Azure Storage replication

- configure blob object replication

* Configure Azure files and Azure blob storage.

- create an Azure file share

- create and configure Azure File Sync service

- configure Azure Blob Storage

- configure storage tiers

- configure blob lifecycle management

3. Deploy and Manage Azure Compute Resources

* Automate deployment of virtual machines (VMs) by using Azure Resource Manager Templates

- modify an Azure Resource Manager template

- configure a virtual hard disk (VHD) template

- deploy from a template

- save a deployment as an Azure Resource Manager template

- deploy virtual machine extensions

* Configure VMs

- configure Azure Disk Encryption

- move VMs from one resource group to another

- manage VM sizes

- add data disks

- configure networking

- redeploy VMs

- configure high availability

- deploy and configure virtual machine scale sets

* Create and configure containers.

- configure sizing and scaling for Azure Container Instances

- configure container groups for Azure Container Instances

- configure storage for Azure Kubernetes Service (AKS)

- configure scaling for AKS

- configure network connections for AKS

- upgrade an AKS cluster

* Create and configure Azure App Service

- create an App Service plan

- configure scaling settings in an App Service plan

- create an App Service

- secure an App Service

- configure custom domain names

- configure backup for an App Service

- configure networking settings

- configure deployment settings

4. Configure and Manage Virtual Networking

* Implement and manage virtual networking.

- create and configure virtual networks, including peering

- configure private and public IP addresses

- configure user-defined network routes

- implement subnets

- configure endpoints on subnets

- configure private endpoints

- configure Azure DNS, including custom DNS settings and private or public DNS zones

* Secure access to virtual networks

- create security rules

- associate a Network Security Group(NSG) to a subnet or network interface

- evaluate effective security rules

- implement Azure Firewall

- implement Azure Bastion

Configure load balancing. Perform/ensure equipment and software maintenance as scheduled.

Communicate with outside vendors in support of various system platforms.

Document flows, processes, procedures, resolutions, and actions for knowledge sharing and Service Desk Staff enablement.

Assist in determining the IT needs of the company to support operations. Coordinating, planning, maintaining, and troubleshooting all IT- related activities so the company has the necessary infrastructure, and compute tools (software/applications) to operate efficiently.

Recommends, plans, develops, and implements server configuration changes and/or upgrades to maintain appropriate levels of service to the user community.

Education and Experience

• Certifications and/or extensive experience in Azure or cloud platforms, Linux, and Windows Environments
• A minimum of 10 years' IT professional experience required.
• A minimum of 5 dedicated to Cloud Infrastructure Builds and Administration
• Strong critical thinking/problem solving skills required, as well as Project Management skills and the ability to prioritize with and without direct input.
• Strong customer service and mentoring attitude.
• Advanced knowledge of Microsoft-based solutions including Active Directory and O365
• Ability to support Microsoft Server products, including Active Directory, Group Policy, Azure DNS/DHCP, and file/print services.
• An extensive knowledge of computer hardware and operating systems common to a business environment.
• Extensive experience with the Microsoft Server operating system (2012 R2 and newer) in a physical and virtual environment.
• Experience with hosted/cloud-based systems based on MS Azure.
• Ability to create and maintain diagrammatic representations of network configurations using Visio.
• Ability to work independently, be resourceful, and communicate effectively in a decentralized environment.
• Ability/willingness to travel up to 10%.

Pay Rate:

We offer a fantastic total rewards package at Plug, and a brief summary is below:

Base salary is determined on a number of factors including but not limited to education, experience, skills, and geography. These factors are considered when making an offer of employment. If you are interested in this position, we'd ask that you apply.

The above pay range, may not take into account local geographic pay variations. If there is an applicable geographic differential, a member of the HR team can discuss that with you.

Health, Dental & Vision Insurance eligibility starting from the first day of hire

401(k) with 5% company match

Bonus eligibility

Paid time off including vacation, personal and sick time

Paid Holidays

Wellness Reimbursement Program

Potential to apply for Tuition Reimbursement

Employee Referral program

Employee Assistance Program

Plug Power, Inc. is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.