Microsoft Infrastructure Engineer

ON-SITE Position Provides senior technical engineering, administration and operational support for Sappi’s Microsoft infrastructure across the North American business, within a shared global Microsoft estate. The role is responsible for designing, building, securing, maintaining and improving business-critical Microsoft platforms, including Windows Server, Active Directory, hybrid identity, Microsoft 365, endpoint management and related core services. It ensures that corporate offices, mills, shared services and supporting applications remain available, secure, compliant and fit for purpose through disciplined lifecycle management, change control, incident resolution, patching, hardening, documentation and continuous improvement. The role works closely with regional IT, global infrastructure, security, OT and vendor teams to deliver reliable Microsoft services that support 24x7 manufacturing operations and the wider business. Infrastructure EngineeringDesign, build, configure, and manage Windows servers and Microsoft systems throughout their lifecycle.Maintain build standards and configuration baselines to ensure consistency, reliability, and compatibility.Provide technical input for capacity, performance, and infrastructure planning.Identity and Access ManagementAdminister Active Directory, Group Policy, and hybrid identity services.Maintain authentication, DNS, and certificate services supporting business and mill operations.Manage privileged access and resolve complex authentication and access issues.Endpoint and Workplace ServicesManage endpoint and workplace platforms, ensuring device compliance and security.Oversee patching, hardening, and security baseline compliance for servers and endpoints.Administer Microsoft 365 and maintain remote access and virtual workplace environments.Operational Support and Service StabilityProvide third-line support for Microsoft infrastructure incidents, problems, and requests.Monitor system health, troubleshoot recurring issues, and perform root cause analysis.Execute change management activities, support on-call coverage, maintenance windows, and disaster recovery testing.Security, Risk, and ComplianceImplement and maintain security hardening standards and vulnerability remediation.Ensure systems remain on supported software and firmware versions and manage associated risks.Support audits, compliance reviews, and IT/OT security controls in partnership with security and operational teams.Project Delivery and Continuous ImprovementDeliver infrastructure projects, including design, implementation, migration, testing, and support transition.Lead upgrades and migrations with minimal business disruption.Drive continuous improvement through automation, standardization, and process optimization.Documentation and Knowledge TransferMaintain accurate technical documentation, standards, and system records.Capture and share critical knowledge to reduce single-person dependencies.Provide technical coaching and guidance to junior technicians and site IT staff.Qualifications:Degree or diploma in Information Technology, Computer Science or a related field, or equivalent experience Microsoft certifications are an advantage, for example Windows Server, Microsoft 365, Identity or Endpoint Administrator At least five years working on enterprise Microsoft infrastructureExperience of working to security and compliance requirements Experience in infrastructure projects, upgrades and migrationExperience of third line support, on-call work and out-of-hours maintenanceExperience in a manufacturing or mill environment is an advantage