System Engineer

As System Engineer – Windows within our Digital Technology – Service Quality team, you'll be the backbone of Sanofi's enterprise Windows infrastructure — powering the platforms that thousands of employees, manufacturing sites, and life-saving applications depend on every day. We sit at the heart of Sanofi's digital transformation. Our Windows engineering team owns the platform that most of our enterprise and manufacturing applications run on — and the identity services everything else depends on. We combine modern cloud platforms, automation-first engineering, and relentless service excellence to support Sanofi's mission: chasing the miracles of science. About Sanofi Sanofi is dedicated to supporting people through their health challenges. We are a global biopharmaceutical company focused on human health, committed to chasing the miracles of science to improve people's lives. Our team, across some 100 countries, is dedicated to transforming the practice of medicine by working to turn the impossible into the possible. We provide potentially life-changing treatment options and life-saving vaccine protection to millions of people globally, while putting sustainability and social responsibility at the center of our ambitions At Sanofi, we believe our people are our greatest strength, and we are committed to creating an inclusive environment where diverse perspectives drive innovation. Deploy infrastructure as code using Terraform, ARM, or Bicep — provisioning servers that are born compliant, not remediated afterwards Automate post-provisioning configuration with PowerShell DSC, Ansible, or Puppet — from domain join to hardening baselines Own the full server lifecycle — provision, patch, harden, upgrade, and decommission across on-premises data centers, manufacturing sites, Azure IaaS, and AWS EC2 Manage Active Directory and hybrid identity — domain controllers, Group Policy, Entra ID, and federation services Drive patch compliance and vulnerability remediation across the Windows estate using MECM/SCCM or Azure Update Manager Provide L2/L3 operational support , participate in on-call rotations, and lead technical recovery during Major Incidents Build observability and AIOps capabilities — dashboards, alerting, and self-healing automation using Datadog and Splunk Represent Windows platform changes at CAB , ensuring every change is traceable, tested, and low risk

Experience:
Substantial hands-on experience with enterprise Windows Server in large-scale, global environments; regulated industry background (pharma/life sciences) is a plus Windows Server engineering, Active Directory, Failover Clustering, IIS, PKI; cloud IaaS on Azure and AWS; PowerShell at an advanced level; Infrastructure-as-Code (Terraform preferred); ServiceNow ITSM and CMDB Strong ownership mindset, calm under pressure, automation-first instinct, and a genuine dislike of doing the same task twice by hand Certifications: AZ-800/801, AZ-104, ITIL 4, Terraform Associate, or equivalent — valued but not mandatory English required; Global scale — your infrastructure supports patients and employees across the world Automation-first culture — we engineer solutions, we don't click through wizards Hybrid cloud frontier — work across on-prem, Azure, AWS, and Arc-managed hybrid estates Mission-critical ownership — what you deploy, you own — all the way to production stability Innovation with purpose — every server you harden helps bring life-changing medicines to patients faster LI-Hybrid #BarcelonaHub #SanofiHubs