Infrastructure Engineer (Automation & AI)
Marmon Foodservice Technologies · McAllen, TX · 1 mo ago
Information TechnologyFull-time
We need to output HTML fragment with sections: About the role? The posting includes description about company and role. We need headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include only sections with real specific content. No Pay or Schedule if not present. The posting does not mention pay or schedule specifics (only "Hours of work will generally be during regular business hours with at least 40 hours a week but may vary according to special projects, deadlines, or other concerns." That's schedule info? It mentions hours, but it's generic. The instruction: never create Pay/Schedule/Benefits sections unless the posting actually states them. For Schedule, we have some mention: "Hours of work will generally be during regular business hours with at least 40 hours a week but may vary according to special projects, deadlines, or other concerns." That's schedule info, albeit vague. Should we include Schedule section? It says "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state schedule info (hours). So we can include Schedule with that content. Benefits section is present with details. Pay not mentioned, so omit Pay.
We need to avoid repeating job title as heading. Use . Let's extract them:
- Partner with the Cloud Architect and the Security Manager to help define, build, and maintain IaC (Terraform, Bicep/ARM, or equivalent) across our hybrid Azure and on-prem environment
- Support Azure implementation for compute, storage, networking, and identity (Entra ID, Conditional Access, PIM), working closely with the Cloud Architect and the Security Manager
- Help build and maintain CI/CD pipelines for infrastructure changes (Azure DevOps or GitHub Actions), supporting version control and change control (CAB) practices
- Design and maintain automation for immutable backups and disaster recovery processes, in partnership with the Cloud Architect, the Security Manager, and the Infrastructure team
- Support AI-enablement tooling — RAG pipelines, Azure AI Foundry, Copilot/agent integrations — as directed, working with the software engineering and data teams
- Help automate identity, access, and security workflows with the Security Manager in support of Zero Trust initiatives (SSO, Conditional Access, endpoint automation)
- Script and automate recurring IT operations using PowerShell, Python, and Power Automate, following the team's automation-first mandate: do it twice, script it; do it three times, automate it and document it as an SOP
- Support monitoring, alerting, and self-healing automation to reduce manual intervention across hybrid workloads
- Document automation, architecture decisions, and SOPs mapped to SOC 2 / ISO 27001 control requirements
- Participate as a team member on cross-functional automation and AI projects with the business — helping translate requirements into working solutions
- Provide primarily Tier 2 to Tier 3 support, with most work at Tier 3 for automation, Azure, infrastructure, manufacturing systems, and security-related escalations in partnership with the Cloud Architect and the Security Manager
- Perform other duties as assigned
- Partner with manufacturing engineering, local plant teams, and OT vendors to help integrate factory floor systems (PLCs, SCADA, industrial control systems) into the corporate network, with a security-first, segmented design and clear vendor escalation paths
- Support IT/OT convergence for manufacturing locations, including network segmentation, industrial protocol support (e.g., Modbus, OPC-UA, EtherNet/IP), edge computing infrastructure, local plant infrastructure, and vendor escalations
- Help apply IT-30 network segregation standards to manufacturing and OT environments
- Support monitoring and automation needs for OT infrastructure alongside traditional IT systems
Now Required Qualifications, Skills/Competencies section includes:
Education & Certification:
- Bachelor's degree in Computer Science, Information Systems, related field, or equivalent hands-on experience
- Preferred certifications: Microsoft Certified Azure Administrator Associate, Azure AI Engineer Associate, HashiCorp Certified Terraform Associate, or equivalent
Knowledge & Experience:
- 3–6 years of infrastructure engineering experience, with hands-on Azure experience across compute, storage, networking, and Entra ID
- Experience writing or supporting IaC (Terraform, Bicep/ARM, or equivalent) — repeatable, version-controlled deployments, not one-off scripts
- Experience with configuration management and automation tooling (Ansible, PowerShell DSC, Power Automate)
- Exposure to AI or automation platforms — Azure AI Foundry, OpenAI/Copilot integrations, RAG architectures — a plus
- Strong scripting ability in PowerShell and/or Python — automation is a core part of this role, not a nice-to-have
- Experience operating and integrating hybrid environments that bridge on-prem virtualization (Hyper-V/VMware) with Azure
- Familiarity with CI/CD tooling (Azure DevOps, GitHub Actions) and Git-based version control
- Understanding of identity and Zero Trust concepts (Entra ID, Conditional Access, PIM, SSO)
- Exposure to security/compliance frameworks (SOC 2, ISO 27001) and CAB practices
- Experience with monitoring/observability tooling a plus
- Exposure to OT/ICS environments, industrial networking, or manufacturing automation systems a plus
- Willingness to work on-site frequently at the Texas facility to support commissioning and go-live activities
- Bilingual fluency in Spanish and English is required, including the ability to communicate technical concepts clearly with manufacturing teams, vendors, and business stakeholders
Nice to Have:
- Containers and Kubernetes experience
- Network automation (Cisco, Cloudflare, or similar programmable network platforms)
- PKI, HSM, or Key Vault / secrets management experience
- Experience in a manufacturing or industrial environment
Personal Attributes (Critical for This Role):
- Excellent communicator who can translate automation and AI concepts into plain language for business stakeholders
- Genuinely enjoys project work with the business — comfortable being an active team member on initiatives with non-IT partners, not just working IT-to-IT
- Self-directed and curious; treats automation as a mandate and documentation as part of the job, not an afterthought
- Team player who thrives as part of a growing team — this role collaborates closely with the Cloud Architect and the Security Manager as teammates, executing alongside them rather than setting independent direction
- Logical, detail-oriented, and comfortable clarifying requirements before committing to a solution
- Low-ego and collaborative — willing to learn from others and share credit
- Comfortable with ambiguity and evolving requirements in a fast-moving technology landscape
- Strong analytical and creative problem-solving skills
Then "All Employees Follow established policies..." boilerplate to remove.
Benefits section:
- Medical, Dental, Vision, and Prescription Drug insurance plans
- Access to a Health Advocate who is an expert in Marmon’s health plan and can help you select the best health benefits for you and your family
- Tax advantaged spending accounts for health and dependent care expenses
- Wellness programs and resources including Telehealth, Mental Health, Fitness, and Family Planning
- Generous paid time off for personal use, holidays, and parental leave
- Company-sponsored life insurance
- 401(k) with fully vested company match; Marmon may also make an additional annual discretionary contribution to your account, whether or not you contribute on your own
- Financial and retirement advising
Working Conditions (Schedule):
- Work is performed largely in an office/hybrid environment, with occasional presence in manufacturing environments.
- Hours of work will generally be during regular business hours with at