Cloud Developer

Location: Essex (Belle River)

Mastronardi Produce pioneered the commercial greenhouse industry in North America, and we’re now the leading greenhouse vegetable company on the continent. Our award‑winning, flavorful produce is packed under the SUNSET® brand and is available at leading grocery retailers across North America. Family owned for over 65 years, we pride ourselves on having the most flavorful products and the best people in the industry.

We are constantly pushing boundaries to be a leader in fresh produce innovation. We seek individuals that demonstrate our PRIDE values (Passion, Respect, Innovation, Drive, Excellence) to help us fulfill our mission to inspire healthy living through WOW flavor experiences.

Our Kingsville Head Office Location is currently seeking a Cloud Developer to join our Information Technology team! The Cloud Developer plays a critical role in designing, developing, and deploying cloud‑based solutions for the organization. This role requires strong technical expertise in cloud platforms, programming languages, and infrastructure‑as‑code (IaC) practices. The Cloud Developer collaborates with cross‑functional teams to build scalable, secure, and efficient cloud applications and services, aligning them with business goals and strategies.

Values
To perform the job successfully, the incumbent’s behavior must be consistent with the PRIDE values expected of all Mastronardi Produce employees: be Passionate; have Respect; be Innovative; be Driven and strive for Excellence.

Primary Responsibilities

Design and architect enterprise‑scale solutions on Microsoft Azure (primary) with multi‑cloud readiness (AWS/GCP)

Develop cloud‑native applications using Azure Functions, App Services, AKS, and serverless architectures

Build data pipelines with Azure Data Factory, Synapse Analytics, and Azure Databricks

Design and implement Azure Landing Zones following Cloud Adoption Framework (CAF) principles for scalable, secure foundation

Implement Infrastructure as Code using Terraform, ARM templates, or Bicep

Design and maintain CI/CD pipelines in Azure Dev Ops and Git Hub Actions

Design secure network architectures including VNets, subnets, NSGs, VNet peering, VPN Gateway, and Express Route

Architect hybrid cloud connectivity between on‑premises infrastructure and Azure using Express Route, Site‑to‑Site VPN, Azure Virtual WAN, and Azure Arc

Implement network security controls using Azure Firewall, WAF, Private Link, Private Endpoints, and Service Endpoints

Configure hub‑and‑spoke network topology with centralized connectivity and security management

Optimize cloud performance, cost, and security across all environments

Implement comprehensive monitoring using Azure Monitor, Application Insights, and Log Analytics

Ensure security compliance with Zero Trust architecture, Azure AD, Key Vault, and governance policies

Implement DDoS protection, traffic encryption (TLS/SSL), network traffic inspection, and Azure Bastion for secure VM access

Design and implement Azure Policy, Blueprints, and Management Groups for enterprise governance

Lead cloud migration strategies and modernization initiatives

Mentor development teams on cloud best practices and architecture patterns

Qualifications, Education & Experience

Master's/Bachelor's/College degree in Computer Science or related field

10+ years software development experience

4+ years hands‑on Microsoft Azure experience

Security & Identity:
Azure AD, Azure AD B2C, Azure AD Connect (for hybrid identity), Key Vault, Security Center/Defender for Cloud, RBAC, Managed Identities, Conditional Access, Privileged Identity Management (PIM), Microsoft Sentinel

Technical Skills

Programming:
Expert in C#/.NET (8/9/10), Python, or Java; proficient in Power Shell, SQL/No

SQL

IaC & Dev Ops:
Terraform (with Azure Landing Zone modules), ARM/Bicep, Azure Dev Ops, Git Hub Actions, CI/CD pipelines

Monitoring:
Azure Monitor, Application Insights, Log Analytics, Network Watcher, Azure Service Health, distributed tracing

Network Security:
Route tables, User‑Defined Routes (UDR), Azure Firewall policies, traffic filtering, network segmentation, forced tunneling, Border Gateway Protocol (BGP), DNS integration (Azure DNS, Private DNS…