Microsoft Infrastructure Engineer

Sappi; Skowhegan (ME); On-site; USD 110,000 - 150,000; Full time

Job summary

Sappi North America is seeking a senior Microsoft infrastructure professional to design, build, secure, and operate Windows servers, AD, and M365 across the North American business. You will work with regional IT, security, OT and vendor teams to ensure 24x7 manufacturing operations remain available and compliant.

The role requires five+ years of enterprise Microsoft infrastructure experience, strong security focus, and on-call/on-hours maintenance.

Qualifications

• Degree or diploma in Information Technology, Computer Science or a related field, or equivalent experience.
• Microsoft certifications are an advantage, for example Windows Server, Microsoft 365, Identity or Endpoint Administrator
• At least five years working on enterprise Microsoft infrastructure
• Experience of working to security and compliance requirements
• Experience in infrastructure projects, upgrades and migration
• Experience of third line support, on-call work and out-of-hours maintenance
• Experience in a manufacturing or mill environment is an advantage

Responsibilities

• Design, build, configure, and manage Windows servers and Microsoft systems throughout their lifecycle.
• Maintain build standards and configuration baselines to ensure consistency, reliability, and compatibility.
• Provide technical input for capacity, performance, and infrastructure planning.
• Administer Active Directory, Group Policy, and hybrid identity services.
• Maintain authentication, DNS, and certificate services supporting business and mill operations.
• Manage privileged access and resolve complex authentication and access issues.
• Manage endpoint and workplace platforms, ensuring device compliance and security.
• Oversee patching, hardening, and security baseline compliance for servers and endpoints.
• Administer Microsoft 365 and maintain remote access and virtual workplace environments.
• Provide third-line support for Microsoft infrastructure incidents, problems, and requests.
• Monitor system health, troubleshoot recurring issues, and perform root cause analysis.
• Execute change management activities, support on-call coverage, maintenance windows, and disaster recovery testing.
• Implement and maintain security hardening standards and vulnerability remediation.
• Ensure systems remain on supported software and firmware versions and manage associated risks.
• Support audits, compliance reviews, and IT/OT security controls in partnership with security and operational teams.
• Deliver infrastructure projects, including design, implementation, migration, testing, and support transition.
• Lead upgrades and migrations with minimal business disruption.
• Drive continuous improvement through automation, standardization, and process optimization.
• Maintain accurate technical documentation, standards, and system records.
• Capture and share critical knowledge to reduce single-person dependencies.
• Provide technical coaching and guidance to junior technicians and site IT staff

Skills

Microsoft infrastructure

Security & compliance

Project delivery & migration

On-call support

Manufacturing/mill environment

Education

IT/CS degree or diploma

Tools

Windows Server

Microsoft 365

Identity

Endpoint Administrator

Job description

Sappi North America
Sappi North America, headquartered in Boston with corporate offices in Portland, Maine, is a subsidiary of Sappi Limited, a global renewable resource company that uses every part of the tree to make sustainable woodfiber products. With over 12,000 employees and operations in seven countries, we serve customers worldwide. Our diversified businesses include Packaging, Speciality and Graphic Papers and Dissolving Pulp, offering premium products for various industries. From cosmetics packaging and food industry barrier papers to textiles and the clothes you wear, Sappi’s solutions are vital to the future of sustainable alternatives to plastic and other fossil fuel-based products.

ON-SITE Position

Provides senior technical engineering, administration and operational support for Sappi’s Microsoft infrastructure across the North American business, within a shared global Microsoft estate. The role is responsible for designing, building, securing, maintaining and improving business-critical Microsoft platforms, including Windows Server, Active Directory, hybrid identity, Microsoft 365, endpoint management and related core services. It ensures that corporate offices, mills, shared services and supporting applications remain available, secure, compliant and fit for purpose through disciplined lifecycle management, change control, incident resolution, patching, hardening, documentation and continuous improvement. The role works closely with regional IT, global infrastructure, security, OT and vendor teams to deliver reliable Microsoft services that support 24x7 manufacturing operations and the wider business.

• Design, build, configure, and manage Windows servers and Microsoft systems throughout their lifecycle.
• Maintain build standards and configuration baselines to ensure consistency, reliability, and compatibility.
• Provide technical input for capacity, performance, and infrastructure planning.

Identity and Access Management

• Administer Active Directory, Group Policy, and hybrid identity services.
• Maintain authentication, DNS, and certificate services supporting business and mill operations.
• Manage privileged access and resolve complex authentication and access issues.

Endpoint and Workplace Services

• Manage endpoint and workplace platforms, ensuring device compliance and security.
• Oversee patching, hardening, and security baseline compliance for servers and endpoints.
• Administer Microsoft 365 and maintain remote access and virtual workplace environments.

Operational Support and Service Stability

• Provide third-line support for Microsoft infrastructure incidents, problems, and requests.
• Monitor system health, troubleshoot recurring issues, and perform root cause analysis.
• Execute change management activities, support on-call coverage, maintenance windows, and disaster recovery testing.

Security, Risk, and Compliance

• Implement and maintain security hardening standards and vulnerability remediation.
• Ensure systems remain on supported software and firmware versions and manage associated risks.
• Support audits, compliance reviews, and IT/OT security controls in partnership with security and operational teams.

Project Delivery and Continuous Improvement

• Deliver infrastructure projects, including design, implementation, migration, testing, and support transition.
• Lead upgrades and migrations with minimal business disruption.
• Drive continuous improvement through automation, standardization, and process optimization.

Documentation and Knowledge Transfer

• Maintain accurate technical documentation, standards, and system records.
• Capture and share critical knowledge to reduce single-person dependencies.
• Provide technical coaching and guidance to junior technicians and site IT staff.

Qualifications:

Degree or diploma in Information Technology, Computer Science or a related field, or equivalent experience

Microsoft certifications are an advantage, for example Windows Server, Microsoft 365, Identity or Endpoint Administrator

At least five years working on enterprise Microsoft infrastructure

Experience of working to security and compliance requirements

Experience in infrastructure projects, upgrades and migration

Experience of third line support, on-call work and out-of-hours maintenance

Experience in a manufacturing or mill environment is an advantage

Salary is determined by a number of factors including the value of the job to the organization, market forces, internal equity and skills brought to the job.

Sappi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Sappi complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

ABOUT SAPPI

Sappi isa leading global provider of everyday materials made from woodfibre-based renewable resources. As a diversified, innovative and trusted leader focused on sustainable processes and products, we are building a more circular economy by making what we should, not just what we can.