Cloud Infrastructure Engineer

Sunset•Livonia, MI

12d•Onsite

About The Position

Mastronardi Produce is seeking a senior, hands-on Cloud Infrastructure Engineer for its IT team. The role owns the company’s Microsoft Azure environment and the servers, databases, and platform services running on it. The engineer maintains day-to-day infrastructure health and builds automation to make infrastructure secure, repeatable, and supportable through infrastructure-as-code, deployment pipelines, monitoring, and operational tooling. This broad individual-contributor role focuses on infrastructure operations, automation, and platform support across a multi-subscription Azure estate and connected on-premises environments. It supports core business systems, data platforms, integrations, and AI and automation workloads. The engineer administers Azure and Windows Server environments, networking, identity, governance, platform services, and Tier-1 business workloads. The role also owns Azure and SQL Server database operations, backup and recovery execution, infrastructure automation, monitoring, security remediation, cost and capacity management, and operational documentation. It provides production hosting and operational support for AI and automation workloads and infrastructure for ERP modernization, warehouse initiatives, and the One Data Platform on Microsoft Fabric. The position works with Network, Cyber Security, application, data, and AI Enablement teams; follows change-management and governance standards; and contributes reusable technical patterns and cross-training. The work supports multi-site greenhouse and warehouse operations, with occasional travel to US and Canadian locations and required participation in an on-call rotation. A valid passport is required for travel.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
6+ years of infrastructure or cloud engineering experience, including 3+ years with production ownership of Microsoft Azure and Windows Server environments.
Hands-on experience with Azure virtual machines, networking, storage, identity, platform services, governance, and cost management.
Hands-on SQL Server and Azure SQL administration, including backups, restores, patching, upgrades, availability, and performance troubleshooting.
Experience with Azure networking and security services, including VNets, NSGs, private endpoints, VPN/ExpressRoute, Azure Firewall, Web Application Firewall/Application Gateway, Entra ID, RBAC, managed identities, Key Vault, and Defender for Cloud.
Production experience with infrastructure-as-code using Bicep or Terraform and CI/CD using Azure DevOps or GitHub Actions.
Strong PowerShell scripting skills and working Python experience for infrastructure automation.
Experience with Azure Monitor, Log Analytics, or comparable observability tooling, plus enterprise backup, disaster recovery, and patching practices.
Docker experience.
Willingness to participate in an on-call rotation.
Disciplined documentation and change-management practices.

Nice To Haves

Experience with AKS or Azure Container Apps.
Experience deploying or operating Azure AI Foundry or Azure OpenAI workloads.
Experience with automation platforms such as n8n, Make.com, or Power Automate.
Experience supporting ERP platforms such as Microsoft, SAP, or Oracle, and warehouse management systems.
Azure certifications such as AZ-104, AZ-305, AZ-400, AZ-500, or DP-300.
Experience in manufacturing, distribution, food, or agriculture environments.

Responsibilities

Administer Azure virtual machines and Windows Server, including provisioning, sizing, patching, configuration baselines, extensions, agents, lifecycle management, and decommissioning.
Operate Azure subscriptions, resource groups, storage, tagging, RBAC, Azure Policy, Microsoft Entra ID, managed identities, and Azure Key Vault in line with governance standards.
Manage Azure networking and perimeter services with Network Engineering and Cyber Security, including VNets, subnets, NSGs, private endpoints, VPN/ExpressRoute, Azure Firewall, Web Application Firewall, and Application Gateway.
Operate application and integration platform services, including App Services, Function Apps, Service Bus, API Management, AKS, and Azure Container Apps; manage scaling, certificates, configuration, and health monitoring.
Support Tier-1 workloads such as ERP platforms, warehouse management, e-commerce, and integration services through performance troubleshooting, capacity planning, and controlled change implementation.
Own backup and recovery execution for Azure workloads, including restore testing, disaster-recovery exercises, and recovery documentation.
Participate in the on-call rotation and lead root-cause analysis and remediation for infrastructure incidents.
Administer SQL Server on Azure virtual machines and Azure SQL services, including patching, upgrades, backups, restores, availability, storage, performance, and maintenance.
Monitor database health and troubleshoot blocking, long-running queries, and capacity issues with application teams and the Tools, Automation & Database Architect.
Implement database security standards for authentication, least-privilege access, encryption, and auditing, and provide compliance-review evidence.
Support environment refreshes, approved data copies, and database migrations for ERP, warehouse management, and data-platform initiatives.
Implement infrastructure-as-code using Bicep or Terraform and maintain CI/CD pipelines through Azure DevOps or GitHub Actions.
Automate provisioning, patching, compliance checks, reporting, and other repeatable operational work using PowerShell and Python.
Maintain shared scripts, templates, and automation patterns with source control, peer review, testing, and documentation.
Build and operate containerized workloads using Docker and, where required, AKS or Azure Container Apps.
Implement configuration and drift management to keep cloud and server components consistent and secure.
Maintain Azure Monitor and Log Analytics dashboards and alerts, tune noisy signals, and ensure important failures generate actionable notifications.
Review and remediate Microsoft Defender for Cloud recommendations with Cyber Security and platform owners.
Manage cloud cost and capacity through rightsizing, reservations, savings plans, platform consolidation, lifecycle controls, and regular budget reporting.
Test infrastructure changes before implementation, including failure modes, backup or recovery dependencies, and rollback plans.
Maintain patch, backup, access-review, restore-test, and disaster-recovery evidence for governance and audit support.
Provide hosting, identity, networking, scaling, backup, and monitoring for Azure AI Foundry, n8n, Make.com, and Power Automate workloads used by the AI Enablement team.
Deploy and operate AI endpoints, agents, and automation runtimes with controlled versioning and rollout practices.
Implement observability for AI and automation workloads, including latency, failure rates, usage, and cost, and alert on operational anomalies.
Act as the production hand-off point for AI Enablement solutions after runbooks, monitoring, support ownership, and recovery requirements are defined.
Deliver infrastructure for ERP modernization, warehouse initiatives, and the One Data Platform on Microsoft Fabric according to approved project plans.
Document cloud infrastructure, databases, automations, standards, and operating procedures.
Collaborate with Network, Cyber Security, application, data, and AI Enablement teams to resolve cross-platform issues and deliver production-ready environments.
Follow change management and ensure infrastructure work aligns with IT governance, security, and compliance standards.
Cross-train teammates and contribute reusable technical patterns, troubleshooting guidance, and operational improvements.