Microsoft Infrastructure Engineer

This is an on-site role and requires regular in-person presence at Somerset Mill in Skowhegan, Maine. This position is not remote. Sappi North America, headquartered in Boston with corporate offices in Portland, Maine, is a subsidiary of Sappi Limited, a global renewable resource company that uses every part of the tree to make sustainable woodfiber products. With over 12,000 employees and operations in seven countries, we serve customers worldwide. Our diversified businesses include Packaging, Speciality and Graphic Papers and Dissolving Pulp, offering premium products for various industries. From cosmetics packaging and food industry barrier papers to textiles and the clothes you wear, Sappi’s solutions are vital to the future of sustainable alternatives to plastic and other fossil fuel-based products. Provides senior technical engineering, administration and operational support for Sappi’s Microsoft infrastructure across the North American business, within a shared global Microsoft estate. The role is responsible for designing, building, securing, maintaining and improving business-critical Microsoft platforms, including Windows Server, Active Directory, hybrid identity, Microsoft 365, endpoint management and related core services. It ensures that corporate offices, mills, shared services and supporting applications remain available, secure, compliant and fit for purpose through disciplined lifecycle management, change control, incident resolution, patching, hardening, documentation and continuous improvement. The role works closely with regional IT, global infrastructure, security, OT and vendor teams to deliver reliable Microsoft services that support 24x7 manufacturing operations and the wider business. Design, build, configure, and manage Windows servers and Microsoft systems throughout their lifecycle. Maintain build standards and configuration baselines to ensure consistency, reliability, and compatibility. Provide technical input for capacity, performance, and infrastructure planning. Identity and Access Management Administer Active Directory, Group Policy, and hybrid identity services. Maintain authentication, DNS, and certificate services supporting business and mill operations. Manage privileged access and resolve complex authentication and access issues. Endpoint and Workplace Services Manage endpoint and workplace platforms, ensuring device compliance and security. Oversee patching, hardening, and security baseline compliance for servers and endpoints. Administer Microsoft 365 and maintain remote access and virtual workplace environments. Operational Support and Service Stability Provide third-line support for Microsoft infrastructure incidents, problems, and requests. Monitor system health, troubleshoot recurring issues, and perform root cause analysis. Execute change management activities, support on-call coverage, maintenance windows, and disaster recovery testing. Security, Risk, and Compliance Implement and maintain security hardening standards and vulnerability remediation. Ensure systems remain on supported software and firmware versions and manage associated risks. Support audits, compliance reviews, and IT/OT security controls in partnership with security and operational teams. Project Delivery and Continuous Improvement Deliver infrastructure projects, including design, implementation, migration, testing, and support transition. Lead upgrades and migrations with minimal business disruption. Drive continuous improvement through automation, standardization, and process optimization. Documentation and Knowledge Transfer Maintain accurate technical documentation, standards, and system records. Capture and share critical knowledge to reduce single-person dependencies. Provide technical coaching and guidance to junior technicians and site IT staff. Qualifications Degree or diploma in Information Technology, Computer Science or a related field, or equivalent experience Microsoft certifications are an advantage, for example Windows Server, Microsoft 365, Identity or Endpoint Administrator At least five years working on enterprise Microsoft infrastructure Experience of working to security and compliance requirements Experience in infrastructure projects, upgrades and migration Experience of third line support, on-call work and out-of-hours maintenance Experience in a manufacturing or mill environment is an advantage #J-18808-Ljbffr Sappi