Senior Network & System Engineer W - M H/F - Lesaffre

As a global key player in yeasts and fermentation, Lesaffre designs, manufactures and markets innovative solutions forBaking, Food taste & pleasure, Health care and Biotechnology.

Family group born in northern France in 1853, now a multi-national and a multicultural company, Lesaffre is committed toworking with confidence to better nourish and protect the planet.
In close collaboration with its clients and partners, Lesaffre employs11 000 peoplein more than50 countries.

Lesaffre achieves a turnover of 3 billion euros.

As our Senior Network & System Engineer, you are the operational backbone of the Group's infrastructure.

You act as theTechnical Leadfor the Core Infrastructure Manager. You guarantee the global connectivity (WAN/SD-WAN), you manage the move to SASE (Security), but you also operate the "System" layer (Cloud VMs, Identity, Hosting) for critical group applications.

You maintain our legacy and hybrid environments, working closely with external hosting partners to ensure availability and performance.

Your key responsabilites will be :

Global Network Architecture

- WAN Management:Manage and evolve the globalSD-WAN network(Fortinet) and legacy MPLS links (Orange). You ensure the stability of interconnections with partners (IPSec).
- SASE Transformation:Lead the technical migration from traditional VPNs to a modernSASE architecture (FortiClient, Checkpoint Harmony, Palo Alto Prisma Access) in close collaboration with the Cybersecurity team.
- Connectivity Support:Act as the Level 3 expert for network routing and switching issues across the 7 regions and 9 BUs.

System Operations & Cloud Hosting

- Multi-Cloud Management :Supervise the Run of group environments hosted inAzure, AWS, and OVH. You pilot external and internal partners to maintain specific applications and their underlying databases.
- Private Cloud & Legacy Hosting:Pilot the external Managed Service Providers responsible for the group's critical business applications.
- SAP Ecosystem Support:Collaborate with theSAP BC Administratorto manage the peripheral systems surrounding SAP, such as but not limited to interface tool (MFT) and labeling solution.

Identity & Modern Workplace

- Identity Management:ManageMicrosoft Entra IDandDNSfor group entities, ensuring secure authentication protocols in collaboration with the Cyber team and the Group O365 administrator.
- Device Management:Manage theMicrosoft Intunetenant for the group, specifically for subsidiaries with no on-premises infrastructure.

Security, Compliance & Projects

- Security Governance:Participate in monthly governance meetings (DDT O365 Security, Cybersecurity, DDT Group) to align infrastructure operations with security policies.
- Audits:Active participation in annualSWIFT audits, ensuring network and system compliance.
- M&A & Integration:Participate in the technical integration of new acquisitions (Mergers & Acquisitions).
- Roadmap Contribution:Contribute to the DDT Roadmap by proposing technical evolutions and providing support to thePlatform Engineering Teamwhen they need infrastructure expertise.

- Experience:7+ years in a hybrid Network/System role in an international environment.
- Technical Mastery:
- Network:Strong expertise inSD-WAN (Fortinet), IPSec, Routing, LAN, WLAN and SASE concepts.
- System/Cloud:Good knowledge ofAzure/AWS(IaaS), Windows Server, Linux, andSQL/MySQLbasics.
- Identity:Strong knowledge inEntra ID (Azure AD)andIntune.
- Soft Skills:
- Vendor Management:Ability to challenge external providers (MSPs) on SLAs and technical root causes.
- Versatility:Ability to switch from configuring a firewall rule to debugging a SaaS application login issue.
- Service Oriented:You see yourself as a service provider to the BUs and Subsidiaries.