Azure Infrastructure Engineer

Stefanini is looking for an Infrastructure Engineer (Dearborn, MI)

We are looking for candidate who is responsible for building and operating IT hardware and software resources in on-prem, cloud or hybrid scenarios in support of internal customer needs. They are responsible for a wide variety of activities that operationalize cross functional teams such as capacity planning and resource optimization solutions for one-off and long-term workloads, planning, configuring and maintaining servers (including mainframes), creating virtualized environments, providing analytics services, installing and maintaining specialized tools, etc.

• Involved in the design, operation, and maintenance of enterprise servers, including specialty mainframe systems like IBM/LPARS, high performance super computing systems, and general-purpose hybrid and cloud systems, for optimal end-user business operations.
• Research, design, implement and maintain complex infrastructure solutions for internal customer needs such as specialty software, data warehouses, identity access management, event frameworks, containerization and on demand scaling, etc.
• Design and configure secure virtualized environments aligned with enterprise architecture blueprints consisting of virtual machines, virtual networks, high speed and distributed storage systems (SAN, HDFS, SSD, etc.)
• Utilize existing tools or assist in engineering custom monitoring solutions to ensure systems are configured correctly, run efficiently and remain secure against potential threats.
• Monitor and review resources like CPU, memory, storage, and network traffic to ensure effective utilization aligned with expected parameters and to safeguard against runaway costs.
• Resolve bottlenecks and plan for future capacity needs based on resource usage trends. Advise enterprise architecture teams on usage trends to incorporate into future blueprints.

• 5+ years of experience in Microsoft Azure, KQL, Log Analytics, Intune Data Warehouse and Power BI
• Route and operationalize Intune logs in Azure:
  Configure Intune Diagnostic Settings to send audit/operational/compliance/device logs to Azure Monitor / Log Analytics, then author KQL queries, alerts, and workbooks for proactive monitoring.
• Build executive-ready insights:
  Create Power BI dashboards fed by the Intune Data Warehouse and/or Log Analytics queries to trend compliance, deployments, and device health.
• Run multi-device queries at scale:
  Use Intune Advanced Analytics - Device query for multiple devices (KQL) to answer fleet-wide questions (e.g., drivers, firmware, crash patterns) and drive remediations.
• Measure update compliance:
  Implement Windows Update for Business reports (Azure Monitor Logs) and craft KQL queries/Workbooks that track patch deployments, failures, and safeguards.
• Deploy and optimize Endpoint analytics: enable data collection, interpret startup/sign-in scores, and turn insights into configuration changes that reduce help-desk tickets.
• Automate with Microsoft Graph:
  Build secure automations
• Create and manage Microsoft Entra app registrations:
  Design least-privilege application permissions/secrets/certificates for Graph integrations; document consent flows and lifecycle.
• Design & develop Azure Workflows:
  Design, build, and maintain server-less integration workflows using Azure Logic Apps and Azure Function apps to automate business processes.
• Manage Azure substrate for analytics:
  Create and govern Log Analytics work spaces, access control, data retention, and (where needed) data export.
• Secure access with Device Compliance:
  Integrate Intune compliance with Conditional Access to enforce 'require compliant device' for key apps while supporting exceptions and staged rollouts.
• Document and mentor:
  Publish runbooks, standards, and KQL/Power BI templates; coach analysts and support engineers.