Engineer 4 - Infrastructure

Pay up to $140,000 + bonus

Work in office 4 days / 1 day at home 

Comprehensive benefits including 401(k) with employer match

No relocation benefits offered 

Background check required

Bob Evans is an E-verify employer

Job Description

We pride ourselves on serving high-quality farm fresh food at Bob Evans! We are AMERICA’S FARM FRESH! We work hard, pay attention to details (perfect plates, perfect bags), and provide our guests with the best, all-around family dining experience. We have immense pride in our culture and roots to our communities. Working at Bob Evans is about being part of something big – we have a passion for taking care of each other and our guests while serving farm-fresh food at a great value. Our Founder, Bob Evans, was all about growing good…join us at Bob Evans and be an integral part of ... Where Good Grows.

As Principal Infrastructure Engineer, you are responsible for the design, operational performance, cost, and partner governance of Bob Evans Restaurants’ Azure cloud estate and the physical network that connects the Restaurant Support Center, restaurants, and back-of-house systems. This is a hands-on, Azure-first working-leader role: you set architecture standards for Azure and Microsoft 365, direct day to-day delivery with our service partners, and retain in-house ownership of the cloud platform and the underlying network fabric.

• Operate as Azure platform architect and tenant owner — landing zones, subscriptions, governance, infrastructure-as-code (Bicep/Terraform), and platform standards across IaaS and PaaS.
• Own Azure networking end to end — virtual networks, hub-and-spoke topology, FortiVPN site-to site and remote-access connectivity, Azure Firewall, NSGs, private endpoints, and DNS.
• Own the physical network estate — LAN/WAN, switching, routing, wireless, and SD-WAN across the Restaurant Support Center and restaurant sites; direct partner-delivered field support and circuit/carrier management.
• Own partner governance — service levels, scope adherence, change control, incident escalation, and quarterly business reviews against contractual KPIs.
• Lead cost containment and FinOps across Azure, infrastructure, licensing, and managed-services spend; own the annual cloud forecast and monthly variance reviews.
• Direct device and endpoint platform operations across 8,000+ Windows 11 computers and Android tablets via Microsoft Intune — lifecycle, imaging, patching, and compliance posture.
• Configure and manage the organization’s Microsoft LLM and agentic AI platform (Microsoft Copilot and Cowork) — provisioning, licensing, tenant configuration, integration, and lifecycle management, in partnership with the Cybersecurity Lead on security and monitoring.
• Maintain identity and access governance (Entra ID, conditional access, PIM) in partnership with the Cybersecurity Lead.
• Ensure cloud, platform, and network changes meet PCI-DSS 4.0, SOX IT general controls, and other regulatory requirements, coordinating with the Cybersecurity Lead on segmentation and perimeter controls.
• Lead vendor management for Microsoft and network/telecom services — contracts, renewals, true ups, and roadmap alignment.
• Conduct infrastructure reviews, resiliency and disaster-recovery design, risk assessments, and partner performance audits.
• Stay current on the Microsoft Azure roadmap and platform technologies; continuously improve the organization’s cloud and network capabilities.

• Deep, hands-on Azure expertise — IaaS and PaaS, Azure networking, landing zones, infrastructure-as-code, monitoring, and cost optimization (Azure-first).
• Solid physical networking background — switching, routing, wireless, WAN/SD-WAN, and multi site/retail connectivity.
• Microsoft 365 platform depth and endpoint/identity management at scale (Intune, Entra ID, Defender 365, Purview).
• Working knowledge of deploying and operating Microsoft Copilot and agentic AI (Cowork) — licensing, tenant configuration, and integration.
• Strong understanding of cloud and network architecture, identity and access management, data governance, resiliency, and cost optimization.
• Excellent written and verbal communication, with the ability to present complex technical information clearly to non-technical audiences (CIO, CFO, audit, executive sponsors).
• Demonstrable leadership and resourcefulness as a working leader; ability to drive outcomes through a partner organization, not just direct reports.
• Self-driven; comfortable moving forward under ambiguity without analysis paralysis. Strong sense of ownership, urgency, and drive.

• BS in Computer Science, Information Systems, or related field, or equivalent work experience.
• Azure certification required or in-progress — Azure Administrator Associate (AZ-104) or Azure Solutions Architect Expert (AZ-305); networking certification (e.g., CCNA) and ITIL preferred.
• 5+ years’ experience designing, implementing, and operating Azure cloud infrastructure (Azure first).
• 3+ years’ hands-on physical network engineering (LAN/WAN/wireless), ideally in a multi-site or retail environment.
• Experience governing a strategic managed-service partner engagement, including SLA management and contract negotiation, strongly preferred.
• Demonstrated experience with budget planning, cost variance management, and capex/opex classification.
• Experience in customer-centric/retail IT environments preferred.
• Strong skills in Excel, PowerPoint, and collaborative tools.

• None routine; occasional travel to restaurant sites, equipment/closet locations, and partner reviews (<10%).

• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed represent the required knowledge, skill, and/or ability. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• The physical demands described here represent those that an employee must meet to perform the essential functions of this job successfully. While performing the duties of this job, the employee is regularly required to sit and talk or hear. The employee is frequently required to reach with hands and arms. The employee is occasionally required to stand, walk, use hands to finger, handle, or feel objects, tools, or controls; climb or balance; and taste or smell.
• The employee must occasionally lift and/or move up to 10 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.