Job Description

The Senior Infrastructure & Platform Engineer owns Apex's foundational enterprise platforms: cloud infrastructure, security tooling, network architecture, and the operational technology integrations that connect our corporate environment to wind, solar, and storage sites across North America. This is not a break-fix role. It is a platform ownership role with direct exposure to the highest-priority workstreams in the company and a mandate to build infrastructure that is resilient, documented, and ready to scale.

This role sits within the Integrated Technology Solutions (ITS) department and reports to the ITS Director. You will work with cross-functional teams including Asset Management, Operations, SCADA, and data analysts. You will collaborate with managed service partners, security consultants, and infrastructure vendors - and you will be expected to lead, not just execute.

Success in this role looks like: critical infrastructure that is resilient, documented, and understood; security posture that is continuously improved and verifiably measurable; and a platform foundation that other ITS capabilities - AI/ML, Data Governance, OT Security - can be built on with confidence.

Our ideal candidate has done this before at a company navigating real complexity: cloud migration, major platform modernization, scaling inflection points. They bring deep technical judgment and the maturity to work in a collaborative, influence-based organization where how you work with people matters as much as what you build.

Hours/Type: Full Time, Exempt

Department: Integrated Technology Solutions

Travel: 5%

Primary Responsibilities

• Own and continuously improve Apex's core enterprise infrastructure, with particular depth in Azure, where our environment spans multiple subscriptions, resource groups, virtual networking, and integrated platform services across the organization. Responsibilities extend across the full stack: Microsoft Entra ID / Active Directory, Microsoft 365 services, and on-premises physical and virtual server and network environments at corporate and operational sites.
• Partner with ITS leadership and external security partners to continuously improve the organization's security posture, including identity hardening, network segmentation, and SIEM coverage and alert tuning.
• Own and mature Apex's infrastructure-as-code practice, building on an existing foundation of Terraform and Ansible. Apply IaC principles to automate provisioning, enforce configuration consistency, and reduce reliance on manual processes across cloud and hybrid environments - with the expectation that what is currently nascent becomes a disciplined, version-controlled standard under your ownership.
• Design, implement, and maintain identity governance controls - including privileged access management, conditional access policies, dynamic group logic, and lifecycle automation for joiners, movers, and leavers.
• Architect and support zero trust network access (ZTNA).
• Support operational technology (OT) connectivity and site infrastructure, coordinating with others to ensure appropriate segmentation and visibility between corporate IT and field environments.
• Develop and maintain infrastructure documentation, runbooks, architecture diagrams, and change records. Create the institutional knowledge that makes the team resilient, not dependent on any individual.
• Serve as a technical escalation point for ITS Operations Specialists; mentor junior team members and raise the technical baseline across the team.
• Communicate clearly and proactively with ITS leadership, stakeholders, and vendors - translating technical findings into business risk language and written briefings when needed.
• Contribute to ITS policy compliance by implementing technical controls that align with documented standards and frameworks.
• Identify and anticipate infrastructure risks before they become incidents; bring forward prioritized, actionable remediation recommendations rather than waiting to be asked.

Qualifications

Success Profile

To succeed as a Senior Infrastructure & Platform Engineer at Apex Clean Energy, you'll need to excel within the following criteria:

• Education: Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent professional experience. Relevant certifications (e.g., Microsoft SC-100/AZ-305, CrowdStrike CCFA, CompTIA Security+) are a meaningful plus.
• Experience: 7+ years of enterprise infrastructure or platform engineering experience, with at least 3 years in a senior or lead capacity. Prior experience leading infrastructure through a cloud migration or major platform modernization initiative is strongly preferred.
• Technical depth: Expert-level proficiency in Microsoft Entra ID, Active Directory, Azure, and Microsoft 365 administration. Hands-on experience with SIEM tools, ZTNA solutions, network architecture (segmentation, VLANs, firewall policy). Familiarity with IT/OT convergence environments is a differentiator.
• Security orientation: You think about infrastructure through a security lens by default. You understand defense-in-depth principles and can map technical controls to business risk, communicating that clearly to leadership.
• Project and workstream management: Capable of managing multiple parallel technical workstreams with competing priorities. You can scope work, communicate progress, flag blockers early, and deliver against commitments without constant oversight.
• Communication: Strong written communication skills: you can produce a clear technical risk briefing, an architecture summary, or a vendor evaluation memo. You engage well with non-technical stakeholders and know when to escalate versus when to resolve.
• Collaboration and influence: Apex ITS operates as a collaborative hub - you'll need to build trust across departments, work with managed service partners and external consultants, and influence outcomes without always having direct authority.
• Character: Self-directed, intellectually curious, and calm under pressure. You take ownership, ask good questions, and leave things better than you found them. You don't wait to be told there's a problem.
• Location: Charlottesville, VA preferred; hybrid schedule available. Some remote flexibility for exceptional candidates, but in-person collaboration with the ITS team is expected regularly.

Additional Information

Work Environment:

Works primarily traditional office hours in an indoor office environment. Flexible work hours allowed when work duties and business operations permit.

How You'll Grow

At Apex Clean Energy, our professional development plans focus on helping people at every level of their career to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the dynamic, fast-paced renewable energy industry. From on-the-job learning experiences to a robust multi-week onboarding experience to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

What Apex Can Offer You

At Apex Clean Energy, we know that great people make a great company. We value our people and offer employees a broad, best-in-class range of benefits.

• A mission-driven, energetic environment that supports and encourages our people to do their best work every day.
• A respect for and celebration of individuality, differences, and uniqueness
• Collaborative and driven professional workforce committed to supporting your ideas and feedback and accelerating your potential
• Ongoing support and guidance such as on-the-job learning, hands-on experience, and mentorship
• Training, strategies, and tools to support your personal and professional growth
• Team atmosphere of diverse professionals committed to making an impact as an organization
• Opportunities to volunteer and give back to our local communities
• Exceptional benefits such as medical and dental; 401(k) with corporate match
• Base and bonus commensurate with experience
• Responsible Paid Time Off plus standard company holidays
• Benefits Offered: comprehensive high-deductible health plans, dental and vision insurance plans, short-term and long-term disability, group life insurance, 401(k) corporate matching, flexible spending arrangements, company paid parking and cell phone, fitness and wellness corporate discounts