Role Title: Windows Server Engineer Duration: contract to run until 30/11/2026 Location: Knutsford. Hybrid 3 days per week onsite Rate: up to £290.90 p/d Umbrella inside IR35 Role purpose / summary We are seeking a Windows Server Engineer with strong automation and integration capabilities to support the extraction and provisioning of user account data into enterprise Identity & Access Management (IAM) platforms. The role will focus on automating the retrieval of user accounts (primarily from local Windows SAM databases and/or Active Directory) and integrating these into downstream IAM feeds using PowerShell, Ansible, and API-based integrations. This position is critical in ensuring accurate, secure, and automated identity data flows across the infrastructure estate. Key Responsibilities Windows & Identity Engineering Manage and support Windows Server environments (2016/2019/2022) Extract and manage local user and group accounts (SAM database) Support integration with Active Directory where applicable Identify and manage local accounts (e.g., service, admin, break-glass) Automation & Scripting Develop and maintainPowerShell scripts to: Extract user account data from local systems (SAM) or AD Transform data into IAM-compatible formats (JSON, CSV, XML) Build and maintainAnsible playbooks for: Remote user account discovery across server estate Scheduled and repeatable IAM feed execution Ensure automation is: Scalable across large estates Secure and compliant with enterprise policies API & IAM Integration Design and implement API-based integrations to IAM platforms Enable automated identity data feeds using RESTAPIs: Push user data into IAM systems Handle authentication (OAuth, tokens, certificates) Perform data mapping and transformation between source systems and IAM schema Data & Governance Ensure integrity and quality of user identity data feeds Support audit and compliance requirements: Logging and traceability of account extraction Identification of orphaned or unmanaged accounts Collaborate withIAM and security teams to: Define data standards Improve identity governance controls Operational & Continuous Improvement Enhance automation frameworks to reduce manual effort Identify opportunities to: Replace local account usage with centralized identity Improve security posture (e.g., reduce local admin sprawl) Contribute to documentation: Runbooks Architecture diagrams Data flow mappings Required Skills & Experience Core Technical Skills Strong experience with Windows Server administration Advanced PowerShell scripting (mandatory) Hands-on experience with Ansible (Windows modules / WinRM) Experience working with: Local SAM accounts (Get-LocalUser, WMI, CIM) Active Directory (preferred) Integration & API Skills Experience with: REST APIs (GET/POST/PUT) JSON/XML data handling Understanding of: Authentication mechanisms (OAuth, API keys, certificates) Experience integrating with IAM platforms (e.g., SailPoint, Saviynt, Azure AD, Okta) is highly desirable Infrastructure & Security Knowledge of: Windows security model and account management Privileged access and identity governance concepts Familiarity with: Enterprise security standards Audit and compliance requirements Desirable Skills Experience in Financial Services environments Exposure to Identity Governance & Administration (IGA) tools Knowledge of ServiceNow (for workflow/orchestration) Experience with CI/CD pipelines for automation scripts Understanding of hybrid identity environments (on-prem cloud) Key Competencies Strong analytical and problem-solving skills Ability to operate in complex, distributed environments Excellent stakeholder communication (IAM, Security, Infra teams) Focus on automation, accuracy, and operational resilience All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply! If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.