Principal Infrastructure Engineer

Saxo Bank; Gurugram District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Saxo Bank in Gurgaon (On site) seeks an experienced Identity & Security Engineer to design, deploy, and automate secure identity solutions. You will work with a global team across India and Denmark, focusing on AD, PKI, MFA, SSO, and PAM within a heavily regulated environment.

You will contribute to modernization efforts, build automation with PowerShell, and strengthen identity governance and access controls.

Qualifications

• 8–15 years of identity/security experience
• Hands-on experience with Active Directory and PKI
• Experience deploying MFA and passwordless authentications

Responsibilities

• Administer and secure Active Directory, Group Policy, DNS, PKI, and hybrid identity services
• Manage identity lifecycle processes, access reviews, and PAM
• Implement modern authentication (MFA, SSO, passwordless, FIDO2, CA, CA) and protocols
• Maintain AD forests, domain controllers, replication, trusts, password policies
• Develop PowerShell automation for identity operations
• Support incident response and security audits

Skills

Active Directory

Group Policy

DNS

PKI

MFA

SSO

Passwordless authentication

Certificate-based authentication

PAM

Hybrid identity

Kubernetes identity security

PowerShell scripting

Automation

Security hardening

Incident response

Compliance

Tools

Kubernetes

Job description

Job Description:

Location- Gurgaon (On site)

We are looking for individuals who live and breathe establishing and maintaining a secure IT environment in a highly regulated industry. We are continuously improving our security posture, and you will be able to put your mark on the design of our infrastructure but should also be prepared to participate in the deployment, operation, and automation of the systems, which are heavily based on Microsoft technologies. Automation is a key aspect of our approach, and your ability to streamline processes will be crucial to our success.

You will join a highly skilled team in India (Gurugram) with colleagues based in Copenhagen and other locations, where collaboration and continuous improvement are at the heart of our success. With new joiners, we aim to grow and diversify our team in the coming year. Working hours are aligned to India Standard Time, with flexibility to collaborate across time zones when needed.

Responsibilities

• Administer and secure Active Directory, Group Policy, DNS, PKI, and hybrid identity services.


• Manage identity lifecycle processes, access reviews, and Privileged Access Management (PAM).


• Implement modern authentication solutions, including MFA, passwordless authentication, SSO, FIDO2, Conditional Access, and certificate-based authentication.


• Manage authentication protocols such as Kerberos, LDAP/LDAPS, SAML, OAuth 2.0, and OIDC.


• Maintain Active Directory forests, domain controllers, replication, trusts, password policies, and gMSA accounts.


• Manage certificate lifecycles and troubleshoot PKI, CRL, OCSP, and certificate-validation issues.


• Secure Kubernetes environments using RBAC, workload identities, service accounts, and secrets management.


• Develop PowerShell automation for identity operations, compliance reporting, monitoring, and security auditing.


• Troubleshoot complex issues across Active Directory, DNS, PKI, authentication, Kubernetes, and Windows Server.


• Support incident response, root-cause analysis, security assessments, system hardening, audits, and compliance activities.

Your profile

You have 8–15 years of experience and strong hands‑on expertise in:

• Active Directory, Group Policy, DNS, and PKI


• MFA, SSO, passwordless and certificate-based authentication


• PAM, identity governance, and hybrid identity


• Kubernetes identity security and access controls


• PowerShell scripting and automation


• Security hardening, troubleshooting, incident response, and compliance

You are analytical, proactive, and committed to delivering secure, stable, and automated identity solutions.

We get curious people invested in the world

When you work at Saxo, you become a Saxonian and part of a purpose-driven organisation, where good ideas are always taken seriously, and where you can make a true impact. We are invested in your development, and you can expect a robust career from day one when you join Saxo – no matter which role you take on.

You will join 2,500 other ambitious colleagues across 11 countries and become part of an international organisation. Working in Saxo, you will get to meet colleagues from many different cultures and backgrounds, and you should know that we value diversity and inclusion and see it as a genuine source of strength to drive growth, foster innovation and position us for long‑term success.

We encourage an open feedback culture and supportive team environments enabling employees to grow and fulfil their career aspirations.

When you bring passion, curiosity, drive and team spirit, your learning journey will be dynamic and your career opportunities in Saxo will be immense.

At Saxo we don't just offer a job – we offer an opportunity to invest in your future!