Infrastructure Engineer

Mastronardi Produce pioneered the commercial greenhouse industry in North America, and we are now the leading greenhouse vegetable company on the continent. Our award-winning, flavorful produce is packed under the SUNSET® brand and is available at leading grocery retailers across North America. Family owned for over 65 years, we pride ourselves on having the most flavorful products and the best people in the industry.

We are constantly pushing boundaries to be a leader in fresh produce innovation. We seek individuals that demonstrate our PRIDE values (Passion, Respect, Innovation, Drive, Excellence) to help us fulfill our mission to inspire healthy living through WOW flavor experiences.

Our corporate office in Livonia, Michigan is currently looking for Cloud Infrastructure Engineer to join our dynamic IT team! The Cloud Infrastructure Engineer is a senior, hands-on engineer responsible for Mastronardi Produce’s Microsoft Azure environment and the servers, databases and platform services that run on it. The role keeps the environment healthy day to day and builds the automation that makes infrastructure secure, repeatable and supportable through infrastructure-as-code, deployment pipelines, monitoring and operational tooling.

This is a broad individual-contributor role with priorities in infrastructure operations, automation and platform support. The role works across a multi-subscription Azure estate and connected on-premises environments, supporting core business systems, data platforms, integrations, AI and automation workloads.

Values:

To perform the job successfully, the incumbent’s behavior must be consistent with the PRIDE values expected of all Mastronardi Produce employees: be Passionate; have Respect; be Innovative; be Driven and strive for Excellence.

Primary Responsibilities:

• Administer Azure virtual machines and Windows Server, including provisioning, sizing, patching, configuration baselines, extensions, agents, lifecycle management and decommissioning.
• Operate Azure subscriptions, resource groups, storage, tagging, RBAC, Azure Policy, Microsoft Entra , managed identities and Azure Key Vault in line with governance standards.
• Manage Azure networking and perimeter services with the Network Engineer and Cyber Security, including VNets, subnets, NSGs, private endpoints, VPN/Express Route, Azure Firewall, Web Application Firewall and Application Gateway.
• Operate application and integration platform services, including App Services, Function Apps, Service Bus, API Management, AKS and Azure Container Apps, with appropriate scaling, certificates, configuration and health monitoring.
• Support Tier-1 workloads, including ERP platforms (Microsoft, SAP or Oracle), warehouse management, e-commerce and integration services, through performance troubleshooting, capacity planning and controlled change implementation.
• Own backup and recovery execution for Azure workloads, including restore testing, disaster-recovery exercises and current recovery documentation.
• Participate in the on-call rotation and lead root-cause analysis and remediation for infrastructure incidents.

• Administer SQL Server on Azure virtual machines and Azure SQL services, including patching, version upgrades, backups, restores, availability, storage, performance and maintenance.
• Monitor database health and troubleshoot blocking, long-running queries and capacity issues with application teams and the Tools, Automation & Database Architect.
• Implement database security standards covering authentication, least-privilege access, encryption and auditing, and provide evidence for compliance reviews.
• Support environment refreshes, approved data copies and database migrations…