Windows Security Specialist (Active Directory & CyberArk)

Contract Role – Windows Security Specialist (Active Directory & CyberArk) – Hampshire /Hybrid – 12 months initial – Inside IR35

We are seeking a skilled Windows Engineer with strong hands-on experience across Active Directory environments. This role supports a critical security programme focused on RBAC, privileged access, and secure identity controls. The ideal candidate will be proactive, dependable, and able to work collaboratively with senior SMEs.

Role Overview:

• Job Title: Windows Security Specialist
• Location: Fleet, Hampshire 2 days per week onsite (non-negotiable)
• Contract Type: Contract
• Duration: 12 months initial
• Sector: Banking

• AD Groups
• PowerShell scripting
• Building RBAC model, Group Policy, Add Priv. Groups
• Domain access segregation
• Creating and managing AD Objects
• Implementing least privilege
• Managing Group Policy inheritance and reference
• Integrating with tools such as CyberArk
• Managing Windows Server roles and features (especially AD DS, DNS, and GPO)
• Configuring secure remote access and privileged accounts
• Role-based access control (RBAC) and least privilege principles
• Integrating with Active Directory
• Managing service accounts and credential rotation policies
• Troubleshooting authentication and network connectivity issues
• How to onboard Windows accounts and configure CyberArk safes (nice to have)
• Understanding of privileged access management (PAM) concepts
• PowerShell scripting for onboarding, policy enforcement, and reporting
• Assist with design and build of RBAC infrastructure
• Knowledge of SericeNow service management system (incident and change management)
• Banking / Financial Services experience is a strong advantage

Please feel free to contact myself – Daisy Nguyen at Gibbs Consulting/Atrium UK for a confidential chat to know more details about the role.

Please also note: Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.