Infrastructure, Security, IT Support Engineer, 2nd, 3rd line

Our client, a leading marketing organization, is looking to hire an experienced Infrastructure Engineer to maintain and secure core identity and Windows platform services.

This will include full ownership of Active Directory account administration, Privileged Access Management and Windows platform testing.

Engagement via Umbrella Company Only; all taxes & NI deducted at source.

General responsibilities:

• Lead replacement of shared accounts with secure alternatives such as individually-assigned privileged roles, Just-In-Time access and application/service identities.
• Design and implementaiton of new access models and security controls for teams currently dependent on shared credentials.
• Implement and operate PAM solutions including role design, approval workflows and credential vaulting.
• Support least-privilege principles, access reviews, MFA enforcement, and credential rotation policies.
• Develop & maintain policies and standards for account creation, access governance and secure credential handling.
• Support standardised Windows Operating System builds and security baselines (CIS/Microsoft recommendations).
• Troubleshoot Windows issues including GPO conflicts, login/authentication issues and performance issues.
• Partner with InfoSec to remediate vulnerabilities and align identity practices

• Privileged access design and implementation
• Hands-on experience with service account design, application identities and least-privilege application access.
• Excellent understanding of Windows Server
• Windows 10/11
• PowerShell automation skills