Engineer 4 - Infrastructure

Bob Evans Restaurants•New Albany, OH

3d•Hybrid

About The Position

As Principal Infrastructure Engineer, you are responsible for the design, operational performance, cost, and partner governance of Bob Evans Restaurants’ Azure cloud estate and the physical network that connects the Restaurant Support Center, restaurants, and back-of-house systems. This is a hands-on, Azure-first working-leader role: you set architecture standards for Azure and Microsoft 365, direct day to-day delivery with our service partners, and retain in-house ownership of the cloud platform and the underlying network fabric.

Requirements

BS in Computer Science, Information Systems, or related field, or equivalent work experience.
Azure certification required or in-progress — Azure Administrator Associate (AZ-104) or Azure Solutions Architect Expert (AZ-305); networking certification (e.g., CCNA) and ITIL preferred.
5+ years’ experience designing, implementing, and operating Azure cloud infrastructure (Azure first).
3+ years’ hands-on physical network engineering (LAN/WAN/wireless), ideally in a multi-site or retail environment.
Experience governing a strategic managed-service partner engagement, including SLA management and contract negotiation, strongly preferred.
Demonstrated experience with budget planning, cost variance management, and capex/opex classification.
Experience in customer-centric/retail IT environments preferred.
Strong skills in Excel, PowerPoint, and collaborative tools.
Deep, hands-on Azure expertise — IaaS and PaaS, Azure networking, landing zones, infrastructure-as-code, monitoring, and cost optimization (Azure-first).
Solid physical networking background — switching, routing, wireless, WAN/SD-WAN, and multi site/retail connectivity.
Microsoft 365 platform depth and endpoint/identity management at scale (Intune, Entra ID, Defender 365, Purview).
Working knowledge of deploying and operating Microsoft Copilot and agentic AI (Cowork) — licensing, tenant configuration, and integration.
Strong understanding of cloud and network architecture, identity and access management, data governance, resiliency, and cost optimization.
Excellent written and verbal communication, with the ability to present complex technical information clearly to non-technical audiences (CIO, CFO, audit, executive sponsors).
Demonstrable leadership and resourcefulness as a working leader; ability to drive outcomes through a partner organization, not just direct reports.
Self-driven; comfortable moving forward under ambiguity without analysis paralysis.
Strong sense of ownership, urgency, and drive.

Nice To Haves

networking certification (e.g., CCNA) and ITIL preferred.
Experience governing a strategic managed-service partner engagement, including SLA management and contract negotiation, strongly preferred.
Experience in customer-centric/retail IT environments preferred.

Responsibilities

Operate as Azure platform architect and tenant owner — landing zones, subscriptions, governance, infrastructure-as-code (Bicep/Terraform), and platform standards across IaaS and PaaS.
Own Azure networking end to end — virtual networks, hub-and-spoke topology, FortiVPN site-to site and remote-access connectivity, Azure Firewall, NSGs, private endpoints, and DNS.
Own the physical network estate — LAN/WAN, switching, routing, wireless, and SD-WAN across the Restaurant Support Center and restaurant sites; direct partner-delivered field support and circuit/carrier management.
Own partner governance — service levels, scope adherence, change control, incident escalation, and quarterly business reviews against contractual KPIs.
Lead cost containment and FinOps across Azure, infrastructure, licensing, and managed-services spend; own the annual cloud forecast and monthly variance reviews.
Direct device and endpoint platform operations across 8,000+ Windows 11 computers and Android tablets via Microsoft Intune — lifecycle, imaging, patching, and compliance posture.
Configure and manage the organization’s Microsoft LLM and agentic AI platform (Microsoft Copilot and Cowork) — provisioning, licensing, tenant configuration, integration, and lifecycle management, in partnership with the Cybersecurity Lead on security and monitoring.
Maintain identity and access governance (Entra ID, conditional access, PIM) in partnership with the Cybersecurity Lead.
Ensure cloud, platform, and network changes meet PCI-DSS 4.0, SOX IT general controls, and other regulatory requirements, coordinating with the Cybersecurity Lead on segmentation and perimeter controls.
Lead vendor management for Microsoft and network/telecom services — contracts, renewals, true ups, and roadmap alignment.
Conduct infrastructure reviews, resiliency and disaster-recovery design, risk assessments, and partner performance audits.
Stay current on the Microsoft Azure roadmap and platform technologies; continuously improve the organization’s cloud and network capabilities.