> Markdown version of [/jobs/ext/3598157-system-engineer-windows-deployment-and-support](https://www.wearedevelopers.com/jobs/ext/3598157-system-engineer-windows-deployment-and-support). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# System Engineer - Windows (Deployment and Support)

- **Company:** Sanofi
- **Location:** Barcelona, Spain
- **Salary:** €43,600.0 - €65,400.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Domain Controllers, Amazon Web Services, Amazon Elastic Compute Cloud, Microsoft Azure, Cloud Computing, Configuration Management Databases, Data Centers, Failover Clustering, Infrastructure as a Service (IaaS), Internet Information Services (IIS), System Center Configuration Manager, Windows Servers, Public Key Infrastructure, Windows PowerShell, Ansible, Software Vulnerability Management, Datadog, Bicep, Puppet, Terraform, Splunk, AIOps, Servicenow
- **Published:** October 7, 2026
- **Apply:** https://sanofi.wd3.myworkdayjobs.com/en-US/SanofiCareers/details/Barcelona/System-Engineer---Windows--Deployment-and-Support--_R2873757-1

## About the Role

* Experience: Substantial hands-on experience with enterprise Windows Server in large-scale, global environments; regulated industry background (pharma/life sciences) is a plus
 * Technical skills: Windows Server engineering, Active Directory, Failover Clustering, IIS, PKI; cloud IaaS on Azure and AWS; PowerShell at an advanced level; Infrastructure-as-Code (Terraform preferred); ServiceNow ITSM and CMDB
 * Soft skills: Strong ownership mindset, calm under pressure, automation-first instinct, and a genuine dislike of doing the same task twice by hand
 * Certifications: AZ-800/801, AZ-104, ITIL 4, Terraform Associate, or equivalent - valued but not mandatory
 * Languages: English required; additional languages are a plus

## Description

* Deploy infrastructure as code using Terraform, ARM, or Bicep - provisioning servers that are born compliant, not remediated afterwards
 * Automate post-provisioning configuration with PowerShell DSC, Ansible, or Puppet - from domain join to hardening baselines
 * Own the full server lifecycle - provision, patch, harden, upgrade, and decommission across on-premises data centers, manufacturing sites, Azure IaaS, and AWS EC2
 * Manage Active Directory and hybrid identity - domain controllers, Group Policy, Entra ID, and federation services
 * Drive patch compliance and vulnerability remediation across the Windows estate using MECM/SCCM or Azure Update Manager
 * Provide L2/L3 operational support, participate in on-call rotations, and lead technical recovery during Major Incidents
 * Build observability and AIOps capabilities - dashboards, alerting, and self-healing automation using Datadog and Splunk
 * Represent Windows platform changes at CAB, ensuring every change is traceable, tested, and low risk