Microsoft Infrastructure Engineer

SappiSkowhegan, ME
Onsite

About The Position

Provides senior technical engineering, administration and operational support for Sappi’s Microsoft infrastructure across the North American business, within a shared global Microsoft estate. The role is responsible for designing, building, securing, maintaining and improving business-critical Microsoft platforms, including Windows Server, Active Directory, hybrid identity, Microsoft 365, endpoint management and related core services. It ensures that corporate offices, mills, shared services and supporting applications remain available, secure, compliant and fit for purpose through disciplined lifecycle management, change control, incident resolution, patching, hardening, documentation and continuous improvement. The role works closely with regional IT, global infrastructure, security, OT and vendor teams to deliver reliable Microsoft services that support 24x7 manufacturing operations and the wider business.

Requirements

  • Degree or diploma in Information Technology, Computer Science or a related field, or equivalent experience
  • At least five years working on enterprise Microsoft infrastructure
  • Experience of working to security and compliance requirements
  • Experience in infrastructure projects, upgrades and migration
  • Experience of third line support, on-call work and out-of-hours maintenance

Nice To Haves

  • Microsoft certifications are an advantage, for example Windows Server, Microsoft 365, Identity or Endpoint Administrator
  • Experience in a manufacturing or mill environment is an advantage

Responsibilities

  • Design, build, configure, and manage Windows servers and Microsoft systems throughout their lifecycle.
  • Maintain build standards and configuration baselines to ensure consistency, reliability, and compatibility.
  • Provide technical input for capacity, performance, and infrastructure planning.
  • Administer Active Directory, Group Policy, and hybrid identity services.
  • Maintain authentication, DNS, and certificate services supporting business and mill operations.
  • Manage privileged access and resolve complex authentication and access issues.
  • Manage endpoint and workplace platforms, ensuring device compliance and security.
  • Oversee patching, hardening, and security baseline compliance for servers and endpoints.
  • Administer Microsoft 365 and maintain remote access and virtual workplace environments.
  • Provide third-line support for Microsoft infrastructure incidents, problems, and requests.
  • Monitor system health, troubleshoot recurring issues, and perform root cause analysis.
  • Execute change management activities, support on-call coverage, maintenance windows, and disaster recovery testing.
  • Implement and maintain security hardening standards and vulnerability remediation.
  • Ensure systems remain on supported software and firmware versions and manage associated risks.
  • Support audits, compliance reviews, and IT/OT security controls in partnership with security and operational teams.
  • Deliver infrastructure projects, including design, implementation, migration, testing, and support transition.
  • Lead upgrades and migrations with minimal business disruption.
  • Drive continuous improvement through automation, standardization, and process optimization.
  • Maintain accurate technical documentation, standards, and system records.
  • Capture and share critical knowledge to reduce single-person dependencies.
  • Provide technical coaching and guidance to junior technicians and site IT staff.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service