Endpoint Infrastructure Engineer Jobs (NOW HIRING)

This is an on-site role and requires regular in-person presence at Somerset Mill in Skowhegan, Maine. This position is not remote.
Provides senior technical engineering, administration and operational support for Sappi's Microsoft infrastructure across the North American business, within a shared global Microsoft estate. The role is responsible for designing, building, securing, maintaining and improving business-critical Microsoft platforms, including Windows Server, Active Directory, hybrid identity, Microsoft 365, endpoint management and related core services. It ensures that corporate offices, mills, shared services and supporting applications remain available, secure, compliant and fit for purpose through disciplined lifecycle management, change control, incident resolution, patching, hardening, documentation and continuous improvement. The role works closely with regional IT, global infrastructure, security, OT and vendor teams to deliver reliable Microsoft services that support 24x7 manufacturing operations and the wider business.
Infrastructure Engineering

• Design, build, configure, and manage Windows servers and Microsoft systems throughout their lifecycle.
• Maintain build standards and configuration baselines to ensure consistency, reliability, and compatibility.
• Provide technical input for capacity, performance, and infrastructure planning.

Identity and Access Management

• Administer Active Directory, Group Policy, and hybrid identity services.
• Maintain authentication, DNS, and certificate services supporting business and mill operations.
• Manage privileged access and resolve complex authentication and access issues.

Endpoint and Workplace Services

• Manage endpoint and workplace platforms, ensuring device compliance and security.
• Oversee patching, hardening, and security baseline compliance for servers and endpoints.
• Administer Microsoft 365 and maintain remote access and virtual workplace environments.

Operational Support and Service Stability

• Provide third-line support for Microsoft infrastructure incidents, problems, and requests.
• Monitor system health, troubleshoot recurring issues, and perform root cause analysis.
• Execute change management activities, support on-call coverage, maintenance windows, and disaster recovery testing.

Security, Risk, and Compliance

• Implement and maintain security hardening standards and vulnerability remediation.
• Ensure systems remain on supported software and firmware versions and manage associated risks.
• Support audits, compliance reviews, and IT/OT security controls in partnership with security and operational teams.

Project Delivery and Continuous Improvement

• Deliver infrastructure projects, including design, implementation, migration, testing, and support transition.
• Lead upgrades and migrations with minimal business disruption.
• Drive continuous improvement through automation, standardization, and process optimization.

Documentation and Knowledge Transfer

• Maintain accurate technical documentation, standards, and system records.
• Capture and share critical knowledge to reduce single-person dependencies.
• Provide technical coaching and guidance to junior technicians and site IT staff.

Qualifications:
Degree or diploma in Information Technology, Computer Science or a related field, or equivalent experience
Microsoft certifications are an advantage, for example Windows Server, Microsoft 365, Identity or Endpoint Administrator
At least five years working on enterprise Microsoft infrastructure
Experience of working to security and compliance requirements
Experience in infrastructure projects, upgrades and migration
Experience of third line support, on-call work and out-of-hours maintenance
Experience in a manufacturing or mill environment is an advantage
This is an on-site role and requires regular in-person presence at Somerset Mill in Skowhegan, Maine. This position is not remote.
Provides senior technical engineering, administration and operational support for Sappi's Microsoft infrastructure across the North American business, within a shared global Microsoft estate. The role is responsible for designing, building, securing, maintaining and improving business-critical Microsoft platforms, including Windows Server, Active Directory, hybrid identity, Microsoft 365, endpoint management and related core services. It ensures that corporate offices, mills, shared services and supporting applications remain available, secure, compliant and fit for purpose through disciplined lifecycle management, change control, incident resolution, patching, hardening, documentation and continuous improvement. The role works closely with regional IT, global infrastructure, security, OT and vendor teams to deliver reliable Microsoft services that support 24x7 manufacturing operations and the wider business.
Infrastructure Engineering

• Design, build, configure, and manage Windows servers and Microsoft systems throughout their lifecycle.
• Maintain build standards and configuration baselines to ensure consistency, reliability, and compatibility.
• Provide technical input for capacity, performance, and infrastructure planning.

Identity and Access Management

• Administer Active Directory, Group Policy, and hybrid identity services.
• Maintain authentication, DNS, and certificate services supporting business and mill operations.
• Manage privileged access and resolve complex authentication and access issues.

Endpoint and Workplace Services

• Manage endpoint and workplace platforms, ensuring device compliance and security.
• Oversee patching, hardening, and security baseline compliance for servers and endpoints.
• Administer Microsoft 365 and maintain remote access and virtual workplace environments.

Operational Support and Service Stability

• Provide third-line support for Microsoft infrastructure incidents, problems, and requests.
• Monitor system health, troubleshoot recurring issues, and perform root cause analysis.
• Execute change management activities, support on-call coverage, maintenance windows, and disaster recovery testing.

Security, Risk, and Compliance

• Implement and maintain security hardening standards and vulnerability remediation.
• Ensure systems remain on supported software and firmware versions and manage associated risks.
• Support audits, compliance reviews, and IT/OT security controls in partnership with security and operational teams.

Project Delivery and Continuous Improvement

• Deliver infrastructure projects, including design, implementation, migration, testing, and support transition.
• Lead upgrades and migrations with minimal business disruption.
• Drive continuous improvement through automation, standardization, and process optimization.

Documentation and Knowledge Transfer

• Maintain accurate technical documentation, standards, and system records.
• Capture and share critical knowledge to reduce single-person dependencies.
• Provide technical coaching and guidance to junior technicians and site IT staff.

Qualifications:
Degree or diploma in Information Technology, Computer Science or a related field, or equivalent experience
Microsoft certifications are an advantage, for example Windows Server, Microsoft 365, Identity or Endpoint Administrator
At least five years working on enterprise Microsoft infrastructure
Experience of working to security and compliance requirements
Experience in infrastructure projects, upgrades and migration
Experience of third line support, on-call work and out-of-hours maintenance
Experience in a manufacturing or mill environment is an advantage
Salary is determined by a number of factors including the value of the job to the organization, market forces, internal equity and skills brought to the job.
Sappi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Sappi complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Salary is determined by a number of factors including the value of the job to the organization, market forces, internal equity and skills brought to the job.
Sappi provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Sappi complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
ABOUT SAPPI
Sappi is a leading global provider of everyday materials made from woodfibre-based renewable resources. As a diversified, innovative and trusted leader focused on sustainable processes and products, we are building a more circular economy by making what we should, not just what we can.
HR Contact for Questions:
Name: Bethany Kurlanska
Email: Bethany.Kurlanska@sappi.com
Telephone number: 207-857-1008