Axium Packaging

Axium Packaging is seeking a Windows Systems Administrator / Azure & M365 Administrator to ensure the stability, security, and performance of our Microsoft environment across corporate offices and manufacturing plants in the U.S., Canada, and Mexico. This role is responsible for administering Windows Server, Active Directory, Group Policy, Azure (including Entra ID / Azure AD), and Microsoft 365 services. The ideal candidate will help deliver a secure, reliable, and efficient technology foundation that supports plant uptime, production, quality, and overall business growth.

Key Responsibilities

Windows Server & Active Directory

• Administer, maintain, and troubleshoot Windows Server environments (physical and virtual) supporting corporate and plant operations.
• Manage Active Directory domain services, including accounts, groups, OUs, and access controls.
• Design and maintain Group Policies (GPOs) for security baselines, configuration management, software deployments, and system hardening.
• Monitor and optimize server performance and capacity for 24/7 manufacturing operations.
• Perform operating system upgrades, patches, and security updates within maintenance/change windows.
• Support file/print services and core infrastructure services (DNS, DHCP) across multiple plants.

Azure / Entra ID & Cloud Services

• Administer Azure and Entra ID tenants, including identities, roles, groups, and access policies.
• Implement and manage conditional access, MFA, and identity security controls.
• Support hybrid identity (AD Connect, sync, SSO) between on-prem AD and Azure.
• Manage and monitor Azure resources (VMs, storage, networking).
• Collaborate with infrastructure, application, and security teams on cloud migration and modernization initiatives.

Microsoft 365 Administration

• Administer Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
• Manage licensing, mail flow, DLs, shared mailboxes, and retention policies.
• Monitor service health and remediate M365 issues, working with Microsoft Support as needed.
• Implement security and compliance features (DLP, Safe Links, Safe Attachments, retention labels).

Security, Compliance & Group Policy

• Develop and maintain GPO-based security standards (password/lockout policies, baselines, application controls).
• Partner with cybersecurity teams on vulnerability remediation, patch management, and endpoint security.
• Participate in security incident response activities related to Windows, Azure, M365, or identity.
• Ensure system configurations meet Axium’s security policies and compliance requirements.

Operations, Monitoring & Support

• Proactively monitor systems and logs to prevent incidents and minimize downtime.
• Troubleshoot and resolve Level 2/3 issues involving Windows Server, AD, Azure, and M365.
• Support BCP/DR readiness, including backup/restore validation and failover tests.
• Maintain accurate documentation of systems, configurations, procedures, and diagrams.
• Participate in on-call rotation and after-hours maintenance when required.

Automation & Continuous Improvement

• Use PowerShell and other scripts to automate tasks, improve consistency, and reduce manual work.
• Recommend and implement improvements in performance, reliability, and security.
• Contribute to SOPs, best practices, and IT knowledge base content.

Qualifications

Required

• Bachelor’s degree in IT, Computer Science, or equivalent experience.
• 5+ years of hands-on experience supporting Windows Server environments in a corporate or multi-site setting (manufacturing preferred).
• Strong experience with Windows Server (2016/2019/2022), Active Directory and GPOs, Azure/Entra ID, and Microsoft 365.
• Solid understanding of networking fundamentals (DNS, DHCP, TCP/IP, VPNs, firewalls).
• Proficiency with PowerShell scripting for administration/automation.
• Experience with change management and ITSM ticketing processes.
• Strong analytical and troubleshooting skills with a focus on uptime and reliability.
• Excellent communication and documentation skills, including ability to work with non-technical users.

Preferred

• Experience supporting a 24/7 production environment.
• Experience with Intune (Endpoint Manager).
• Exposure to OT/plant-floor environments and cross-functional teams (production, engineering, quality, maintenance).
• Familiarity with security frameworks and hardening best practices.
• Microsoft certifications (Azure Administrator Associate, M365 Administrator Associate, Windows Server Hybrid Administrator Associate).

Personal Attributes

• Customer-focused with strong ownership and urgency, especially regarding plant up time.
• Detail-oriented and disciplined about standards and documentation.
• Able to manage multiple priorities in a fast-paced, multi-site environment.
• Collaborative team player who communicates clearly with technical and non-technical stakeholders.

Continuous learner, who stays current on Microsoft, cloud, and security technologies.

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible schedule
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Work Location: In person