Windows Server Engineer

We are hiring for Windows Server Engineer at Knutsford, UK – 3 days per week Onsite

• We are seeking a Windows Server Engineer with strong automation and integration capabilities to support the extraction and provisioning of user account data into enterprise Identity & Access Management (IAM) platforms.
• The role will focus on automating the retrieval of user accounts (primarily from local Windows SAM databases and/or Active Directory) and integrating these into downstream IAM feeds using Power Shell, Ansible, and API-based integrations.
• This position is critical in ensuring accurate, secure, and automated identity data flows across the infrastructure estate.

• Manage and support Windows Server environments (2016/2019/2022)
• Extract and manage local user and group accounts (SAM database)
• Support integration with Active Directory where applicable
• Identify and manage local accounts (e.g., service, admin, break-glass)

• Develop and maintain Power Shell scripts to:
• Extract user account data from local systems (SAM) or AD
• Transform data into IAM-compatible formats (JSON, CSV, XML)
• Build and maintain Ansible playbooks for:
• Scheduled and repeatable IAM feed execution
• Secure and compliant with enterprise policies

• Design and implement API-based integrations to IAM platforms
• Enable automated identity data feeds using REST APIs:
• Perform data mapping and transformation between source systems and IAM schema

• Ensure integrity and quality of user identity data feeds
• Support audit and compliance requirements:
• Logging and traceability of account extraction
• Identification of orphaned or unmanaged accounts
• Collaborate with IAM and security teams to:
• Improve identity governance controls

• Enhance automation frameworks to reduce manual effort
• Identify opportunities to:
• Replace local account usage with centralized identity
• Improve security posture (e.g., reduce local admin sprawl)
• Contribute to documentation:
• Runbooks
• Data flow mappings

• Strong experience with Windows Server administration
• Advanced Power Shell scripting (mandatory)
• Hands-on experience with Ansible (Windows modules / WinRM)
• Experience working with:
• Local SAM accounts (Get-Local User, WMI, CIM)
• Active Directory (preferred)

• Experience with:
• REST APIs (GET/POST/PUT)
• Understanding of:
• Experience integrating with IAM platforms (e.g., SailPoint, Saviynt, Azure AD, Okta) is highly desirable

• Knowledge of:
• Windows security model and account management
• Privileged access and identity governance concepts
• Familiarity with:
• Enterprise security standards
• Audit and compliance requirements
• Experience in Financial Services environments
• Exposure to Identity Governance & Administration (IGA) tools
• Knowledge of Service Now (for workflow/orchestration)
• Experience with CI/CD pipelines for automation scripts
• Understanding of hybrid identity environments (on-prem + cloud)
• Strong analytical and problem-solving skills
• Ability to operate in complex, distributed environments
• Excellent stakeholder communication (IAM, Security, Infra teams)
• Focus on automation, accuracy, and operational resilience