Azure Infrastructure Engineer

Stefanini Group•Dearborn, MI

1d•Onsite

About The Position

Stefanini Group is hiring an Infrastructure Engineer in Dearborn, MI. This role is responsible for building and operating IT hardware and software resources in on-prem, cloud, or hybrid scenarios to support internal customer needs. Key activities include capacity planning, resource optimization, server configuration (including mainframes), virtual environment creation, analytics services, and specialized tool installation and maintenance.

Requirements

Microsoft Azure
4+ Years of experience in IT.
Experience configuring Intune Diagnostic Settings to send audit/operational/compliance/device logs to Azure Monitor / Log Analytics.
Experience authoring KQL queries, alerts, and workbooks for proactive monitoring.
Experience creating Power BI dashboards fed by the Intune Data Warehouse and/or Log Analytics queries to trend compliance, deployments, and device health.
Experience using Intune Advanced Analytics - Device query for multiple devices (KQL) to answer fleet-wide questions (e.g., drivers, firmware, crash patterns) and drive remediations.
Experience implementing Windows Update for Business reports (Azure Monitor Logs).
Experience crafting KQL queries/Workbooks that track patch deployments, failures, and safeguards.
Experience enabling data collection, interpreting startup/sign-in scores, and turning insights into configuration changes that reduce help-desk tickets.
Experience building secure automations.
Experience creating and managing Microsoft Entra app registrations: designing least-privilege application permissions/secrets/certificates for Graph integrations; documenting consent flows and lifecycle.
Experience designing and developing Azure Workflows: Design, build, and maintain server-less integration workflows using Azure Logic Apps and Azure Function apps to automate business processes.
Experience managing Azure substrate for analytics: creating and governing Log Analytics workspaces, access control, data retention, and (where needed) data export.
Experience securing access with Device Compliance: integrating Intune compliance with Conditional Access to enforce 'require compliant device' for key apps while supporting exceptions and staged rollouts.
Experience publishing runbooks, standards, and KQL/Power BI templates.
Experience coaching analysts and support engineers.

Nice To Haves

Client Management Experience

Responsibilities

Involved in the design, operation, and maintenance of enterprise servers, including specialty mainframe systems like IBM/LPARS, high performance super computing systems, and general-purpose hybrid and cloud systems, for optimal end-user business operations.
Research, design, implement and maintain complex infrastructure solutions for internal customer needs such as specialty software, data warehouses, identity access management, event frameworks, containerization and on demand scaling, etc.
Design and configure secure virtualized environments aligned with enterprise architecture blueprints consisting of virtual machines, virtual networks, high speed and distributed storage systems (SAN, HDFS, SSD, etc.).
Utilize existing tools or assist in engineering custom monitoring solutions to ensure systems are configured correctly, run efficiently and remain secure against potential threats.
Monitor and review resources like CPU, memory, storage, and network traffic to ensure effective utilization aligned with expected parameters and to safeguard against runaway costs.
Resolve bottlenecks and plan for future capacity needs based on resource usage trends.
Advise enterprise architecture teams on usage trends to incorporate into future blueprints.
Configure Intune Diagnostic Settings to send audit/operational/compliance/device logs to Azure Monitor / Log Analytics, then author KQL queries, alerts, and workbooks for proactive monitoring.
Create Power BI dashboards fed by the Intune Data Warehouse and/or Log Analytics queries to trend compliance, deployments, and device health.
Use Intune Advanced Analytics - Device query for multiple devices (KQL) to answer fleet-wide questions (e.g., drivers, firmware, crash patterns) and drive remediations.
Implement Windows Update for Business reports (Azure Monitor Logs) and craft KQL queries/Workbooks that track patch deployments, failures, and safeguards.
Enable data collection, interpret startup/sign-in scores, and turn insights into configuration changes that reduce help-desk tickets.
Build secure automations.
Create and manage Microsoft Entra app registrations: design least-privilege application permissions/secrets/certificates for Graph integrations; document consent flows and lifecycle.
Design & develop Azure Workflows: Design, build, and maintain server-less integration workflows using Azure Logic Apps and Azure Function apps to automate business processes.
Manage Azure substrate for analytics: create and govern Log Analytics workspaces, access control, data retention, and (where needed) data export.
Secure access with Device Compliance: integrate Intune compliance with Conditional Access to enforce 'require compliant device' for key apps while supporting exceptions and staged rollouts.
Document and mentor: publish runbooks, standards, and KQL/Power BI templates; coach analysts and support engineers.