Principal Infrastructure Engineer

Location- Gurgaon (On site)
We are looking for individuals who live and breathe establishing and maintaining a secure IT environment in a highly regulated industry. We are continuously improving our security posture, and you will be able to put your mark on the design of our infrastructure but should also be prepared to participate in the deployment, operation, and automation of the systems, which are heavily based on Microsoft technologies. Automation is a key aspect of our approach, and your ability to streamline processes will be crucial to our success.
You will join a highly skilled team in India (Gurugram) with colleagues based in Copenhagen and other locations, where collaboration and continuous improvement are at the heart of our success. With new joiners, we aim to grow and diversify our team in the coming year. Working hours are aligned to India Standard Time, with flexibility to collaborate across time zones when needed.
Responsibilities
Administer and secure Active Directory, Group Policy, DNS, PKI, and hybrid identity services.
Manage identity lifecycle processes, access reviews, and Privileged Access Management (PAM).
Implement modern authentication solutions, including MFA, passwordless authentication, SSO, FIDO2, Conditional Access, and certificate-based authentication.
Manage authentication protocols such as Kerberos, LDAP/LDAPS, SAML, OAuth 2.0, and OIDC.
Maintain Active Directory forests, domain controllers, replication, trusts, password policies, and gMSA accounts.
Manage certificate lifecycles and troubleshoot PKI, CRL, OCSP, and certificate-validation issues.
Secure Kubernetes environments using RBAC, workload identities, service accounts, and secrets management.
Develop PowerShell automation for identity operations, compliance reporting, monitoring, and security auditing.
Troubleshoot complex issues across Active Directory, DNS, PKI, authentication, Kubernetes, and Windows Server.
Support incident response, root-cause analysis, security assessments, system hardening, audits, and compliance activities.
Your profile
You have 8–15 years of experience and strong hands-on expertise in:
Active Directory, Group Policy, DNS, and PKI
MFA, SSO, passwordless and certificate-based authentication
PAM, identity governance, and hybrid identity
Kubernetes identity security and access controls
PowerShell scripting and automation
Security hardening, troubleshooting, incident response, and compliance
You are analytical, proactive, and committed to delivering secure, stable, and automated identity solutions.
We get curious people invested in the world
When you work at Saxo, you become a Saxonian and part of a purpose-driven organisation, where good ideas are always taken seriously, and where you can make a true impact. We are invested in your development, and you can expect a robust career from day one when you join Saxo – no matter which role you take on.
You will join 2,500 other ambitious colleagues across 11 countries and become part of an international organisation. Working in Saxo, you will get to meet colleagues from many different cultures and backgrounds, and you should know that we value diversity and inclusion and see it as a genuine source of strength to drive growth, foster innovation and position us for long-term success.
We encourage an open feedback culture and supportive team environments enabling employees to grow and fulfil their career aspirations.
When you bring passion, curiosity, drive and team spirit, your learning journey will be dynamic and your career opportunities in Saxo will be immense.
At Saxo we don’t just offer a job – we offer an opportunity to invest in your future!
How to apply :
Click here to create an account and upload your resume and a short motivation. We look forward to getting to know you better!