IT Support Engineer, 2, 3 line, Security, infrastructureOur client, a leading marketing organization, is looking to hire an experienced Infrastructure Engineer to maintain and secure core identity and Windows platform services. This will include full ownership of Active Directory account administration, Privileged Access Management and Windows platform testing.Engagement via Umbrella Company Only; all taxes & NI deducted at source.General responsibilities:Lead replacement of shared accounts with secure alternatives such as individually-assigned privileged roles, Just-In-Time access and application/service identities.Design and implementaiton of new access models and security controls for teams currently dependent on shared credentials.Implement and operate PAM solutions including role design, approval workflows and credential vaulting.Support least-privilege principles, access reviews, MFA enforcement, and credential rotation policies.Develop & maintain policies and standards for account creation, access governance and secure credential handling.Support standardised Windows Operating System builds and security baselines (CIS/Microsoft recommendations).Troubleshoot Windows issues including GPO conflicts, login/authentication issues and performance issues.Partner with InfoSec to remediate vulnerabilities and align identity practicesSkills and experience required: -Privileged access design and implementation Hands-on experience with service account design, application identities and least-privilege application access.Excellent understanding of Windows ServerWindows 10/11PowerShell automation skillsReasonable Adjustments:Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.