Cloud Infrastructure Engineer

Mastronardi Produce pioneered the commercial greenhouse industry in North America, and we are now the leading greenhouse vegetable company on the continent. Our award-winning, flavorful produce is packed under the SUNSET® brand and is available at leading grocery retailers across North America. Family owned for over 65 years, we pride ourselves on having the most flavorful products and the best people in the industry. We are constantly pushing boundaries to be a leader in fresh produce innovation. We seek individuals that demonstrate our PRIDE values (Passion, Respect, Innovation, Drive, Excellence) to help us fulfill our mission to inspire healthy living through WOW flavor experiences.

Our corporate office in Livonia, Michigan is currently looking for Cloud Infrastructure Engineer to join our dynamic IT team! The Cloud Infrastructure Engineer is a senior, hands-on engineer responsible for Mastronardi Produce’s Microsoft Azure environment and the servers, databases and platform services that run on it. The role keeps the environment healthy day to day and builds the automation that makes infrastructure secure, repeatable and supportable through infrastructure-as-code, deployment pipelines, monitoring and operational tooling. This is a broad individual-contributor role with priorities in infrastructure operations, automation and platform support. The role works across a multi-subscription Azure estate and connected on-premises environments, supporting core business systems, data platforms, integrations, AI and automation workloads.

Values:

To perform the job successfully, the incumbent’s behavior must be consistent with the PRIDE values expected of all Mastronardi Produce employees: be Passionate; have Respect; be Innovative; be Driven and strive for Excellence.

Primary Responsibilities:

Azure and Server Operations

• Administer Azure virtual machines and Windows Server, including provisioning, sizing, patching, configuration baselines, extensions, agents, lifecycle management and decommissioning.
• Operate Azure subscriptions, resource groups, storage, tagging, RBAC, Azure Policy, Microsoft Entra ID, managed identities and Azure Key Vault in line with governance standards.
• Manage Azure networking and perimeter services with the Network Engineer and Cyber Security, including VNets, subnets, NSGs, private endpoints, VPN/ExpressRoute, Azure Firewall, Web Application Firewall and Application Gateway.
• Operate application and integration platform services, including App Services, Function Apps, Service Bus, API Management, AKS and Azure Container Apps, with appropriate scaling, certificates, configuration and health monitoring.
• Support Tier-1 workloads, including ERP platforms (Microsoft, SAP or Oracle), warehouse management, e-commerce and integration services, through performance troubleshooting, capacity planning and controlled change implementation.
• Own backup and recovery execution for Azure workloads, including restore testing, disaster-recovery exercises and current recovery documentation.
• Participate in the on-call rotation and lead root-cause analysis and remediation for infrastructure incidents.

SQL Server and Azure SQL Operations

• Administer SQL Server on Azure virtual machines and Azure SQL services, including patching, version upgrades, backups, restores, availability, storage, performance and maintenance.
• Monitor database health and troubleshoot blocking, long-running queries and capacity issues with application teams and the Tools, Automation & Database Architect.
• Implement database security standards covering authentication, least-privilege access, encryption and auditing, and provide evidence for compliance reviews.
• Support environment refreshes, approved data copies and database migrations for ERP, warehouse management and data-platform initiatives.

Automation, Infrastructure-as-Code and DevOps

• Bring infrastructure and platform services under infrastructure-as-code using Bicep or Terraform and maintain CI/CD pipelines through Azure DevOps or GitHub Actions.
• Automate provisioning, patching, compliance checks, reporting and other repeatable operational work using PowerShell and Python.
• Maintain shared scripts, templates and automation patterns with source control, peer review, testing and documentation.
• Build and operate containerized workloads using Docker and, where required, AKS or Azure Container Apps.
• Implement configuration and drift management so cloud and server components remain consistent and secure.

Monitoring, Security, Cost and Resilience

• Maintain Azure Monitor and Log Analytics dashboards and alerts, tune noisy signals and ensure important failures generate actionable notifications.
• Review and remediate Microsoft Defender for Cloud recommendations with Cyber Security and platform owners.
• Manage cloud cost and capacity through rightsizing, reservations, savings plans, platform consolidation, lifecycle controls and regular reporting against budget.
• Test infrastructure changes before implementation, including failure modes, backup or recovery dependencies and rollback plans.
• Maintain patch, backup, access-review, restore-test and disaster-recovery evidence required for governance and audit support.

AI, Automation and Data Platform Operations

• Provide hosting, identity, networking, scaling, backup and monitoring for Azure AI Foundry, n8n, Make.com and Power Automate workloads used by the AI Enablement team.
• Deploy and operate AI endpoints, agents and automation runtimes with controlled versioning and rollout practices.
• Implement observability for AI and automation workloads, including latency, failure rates, usage and cost, and alert on operational anomalies.
• Act as the production hand-off point for AI Enablement solutions once runbooks, monitoring, support ownership and recovery requirements are defined.
• Deliver infrastructure for ERP modernization, warehouse initiatives and the One Data Platform on Microsoft Fabric according to approved project plans.

Documentation and Collaboration

• Document cloud infrastructure, databases, automations, standards and operating procedures so platforms do not depend on one individual.
• Work with Network, Cyber Security, application, data and AI Enablement teams to resolve cross-platform issues and deliver production-ready environments.
• Follow change management and ensure infrastructure work aligns with IT governance, security and compliance standards.
• Cross-train teammates and contribute reusable technical patterns, troubleshooting guidance and operational improvements.

Education/Preferred Qualifications:

• Bachelor’s degree in Computer Science, Information Technology or a related field, or equivalent practical experience.
• 6+ years of infrastructure or cloud engineering experience, including 3+ years with production ownership of Microsoft Azure and Windows Server environments.
• Hands-on experience with Azure virtual machines, networking, storage, identity, platform services, governance and cost management.
• Hands-on SQL Server and Azure SQL administration, including backups, restores, patching, upgrades, availability and performance troubleshooting.
• Experience with Azure networking and security services, including VNets, NSGs, private endpoints, VPN/ExpressRoute, Azure Firewall, Web Application Firewall/Application Gateway, Entra ID, RBAC, managed identities, Key Vault and Defender for Cloud.
• Production experience with infrastructure-as-code using Bicep or Terraform and CI/CD using Azure DevOps or GitHub Actions.
• Strong PowerShell scripting skills and working Python experience for infrastructure automation.
• Experience with Azure Monitor, Log Analytics or comparable observability tooling, plus enterprise backup, disaster recovery and patching practices.
• Docker experience; willingness to participate in an on-call rotation; and disciplined documentation and change-management practices.
• Experience with AKS or Azure Container Apps.
• Experience deploying or operating Azure AI Foundry or Azure OpenAI workloads and automation platforms such as n8n, Make.com or Power Automate.
• Experience supporting ERP platforms such as Microsoft, SAP or Oracle and warehouse management systems.
• Azure certifications such as AZ-104, AZ-305, AZ-400, AZ-500 or DP-300.
• Experience in manufacturing, distribution, food or agriculture environments.

Working Environment

• Multi-site greenhouse and warehouse operations requiring occasional travel.
• 24/7 operational environment; participation in an on-call rotation is required.
• Travel required to US and Canadian locations (valid passport required)

Please note: Mastronardi Produce has accommodation processes and policies in place and provides accommodation for employees with disabilities. If you require a specific accommodation because of a disability or documented medical need, please contact the Human Resource office so that arrangements can be made for the appropriate accommodation to be put into place.