System Engineer – Windows (Deployment and Support)

Sanofi Group; Barcelona; Hybrid; EUR 70,000 - 95,000; Full time

Job summary

Sanofi is seeking a System Engineer – Windows in Barcelona to own enterprise Windows infrastructure, from code-based deployments to end-to-end lifecycle management. You will work within Digital Technology – Service Quality to support thousands of users and manufacturing sites, ensuring reliable identity, patching, and security posture across on‑prem, Azure, and AWS.

You will apply automation-first practices, manage hybrid identity, and contribute to observability and incident response.

Qualifications

• Hands-on Windows Server experience in large global environments.
• Regulated/pharma or life sciences background is a plus.
• Strong ownership mindset with automation-first approach.
• Experience with cloud IaaS (Azure/AWS) and IaC tooling.

Responsibilities

• Deploy infrastructure as code with Terraform, ARM, or Bicep.
• Automate post-provisioning configuration with PowerShell DSC, Ansible, or Puppet.
• Own full server lifecycle across on‑prem, Azure, and AWS.
• Manage Active Directory and hybrid identity services.
• Drive patching and vulnerability remediation across Windows estate.
• Provide L2/L3 support and lead during major incidents.
• Build observability with Datadog and Splunk.
• Represent Windows changes at CAB with traceability.

Skills

Windows Server

Active Directory

Failover Clustering

IIS

PKI

Azure IaaS

AWS

PowerShell

Infrastructure-as-Code

Terraform

ServiceNow ITSM

CMDB

Education

AZ-800/801

AZ-104

ITIL 4

Terraform Associate

Tools

Datadog

Splunk

Job description

• Location: Barcelona, Spain

About the Job

As System Engineer – Windows within our Digital Technology – Service Quality team, you'll be the backbone of Sanofi's enterprise Windows infrastructure — powering the platforms that thousands of employees, manufacturing sites, and life-saving applications depend on every day. If you believe infrastructure should be built from code, owned end-to-end, and engineered to never fail, this role was made for you.

We sit at the heart of Sanofi's digital transformation. Our Windows engineering team owns the platform that most of our enterprise and manufacturing applications run on — and the identity services everything else depends on. We combine modern cloud platforms, automation-first engineering, and relentless service excellence to support Sanofi's mission: chasing the miracles of science.

About Sanofi

Sanofi is dedicated to supporting people through their health challenges. We are a global biopharmaceutical company focused on human health, committed to chasing the miracles of science to improve people's lives. Our team, across some 100 countries, is dedicated to transforming the practice of medicine by working to turn the impossible into the possible. We provide potentially life-changing treatment options and life-saving vaccine protection to millions of people globally, while putting sustainability and social responsibility at the center of our ambitions

At Sanofi, we believe our people are our greatest strength, and we are committed to creating an inclusive environment where diverse perspectives drive innovation. Our values — Aim Higher, Act for Patients, Be Bold, and Lead Together — guide everything we do

Main responsibilities

• Deploy infrastructure as code using Terraform, ARM, or Bicep — provisioning servers that are born compliant, not remediated afterwards
• Automate post-provisioning configuration with PowerShell DSC, Ansible, or Puppet — from domain join to hardening baselines
• Own the full server lifecycle — provision, patch, harden, upgrade, and decommission across on-premises data centers, manufacturing sites, Azure IaaS, and AWS EC2
• Manage Active Directory and hybrid identity — domain controllers, Group Policy, Entra ID, and federation services
• Drive patch compliance and vulnerability remediation across the Windows estate using MECM/SCCM or Azure Update Manager
• Provide L2/L3 operational support, participate in on-call rotations, and lead technical recovery during Major Incidents
• Build observability and AIOps capabilities — dashboards, alerting, and self-healing automation using Datadog and Splunk
• Represent Windows platform changes at CAB, ensuring every change is traceable, tested, and low risk

About You

• Experience: Substantial hands‑on experience with enterprise Windows Server in large‑scale, global environments; regulated industry background (pharma/life sciences) is a plus
• Technical skills: Windows Server engineering, Active Directory, Failover Clustering, IIS, PKI; cloud IaaS on Azure and AWS; PowerShell at an advanced level; Infrastructure‑as‑Code (Terraform preferred); ServiceNow ITSM and CMDB
• Soft skills: Strong ownership mindset, calm under pressure, automation‑first instinct, and a genuine dislike of doing the same task twice by hand
• Certifications: AZ‑800/801, AZ‑104, ITIL 4, Terraform Associate, or equivalent — valued but not mandatory
• Languages: English required; additional languages are a plus

Why choose us?

• Global scale — your infrastructure supports patients and employees across the world
• Automation‑first culture — we engineer solutions, we don't click through wizards
• Hybrid cloud frontier — work across on‑prem, Azure, AWS, and Arc‑managed hybrid estates
• Mission‑critical ownership — what you deploy, you own — all the way to production stability
• Innovation with purpose — every server you harden helps bring life‑changing medicines to patients faster

Pursue Progress. Discover Extraordinary.

Join Sanofi and step into a new era of science - where your growth can be just as transformative as the work we do. We invest in you to reach further, think faster, and do what’s never-been-done-before. You’ll help push boundaries, challenge convention, and build smarter solutions that reach the communities we serve. Ready to chase the miracles of science and improve people’s lives? Let’s Pursue Progress and Discover Extraordinary – together.

At Sanofi, we provide equal opportunities to all regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, protected veteran status or other characteristics protected by law.

#LI-Hybrid #BarcelonaHub #SanofiHubs