Principal Infrastructure Engineer

Saxo Group India Private Limited (SGIPL); Gurugram District; On-site; INR 4,000,000 - 8,000,000; Full time

Job summary

Saxo Group India Private Limited (SGIPL) in Gurugram (On site) is seeking an experienced security professional to design, deploy, and operate a secure identity infrastructure across on-prem and cloud environments. You will optimize authentication, authorization, and governance using AD, PKI, MFA, SSO, and passwordless methods.

The role emphasizes automation with PowerShell, RBAC for Kubernetes, and robust incident response, compliance, and hardening practices to protect critical systems and data.

Qualifications

• 8–15 years of hands-on experience in IT security and identity management.
• Strong hands-on with Active Directory, Group Policy, DNS, and PKI.
• Experience with MFA, SSO, passwordless, and certificate-based authentication.
• Knowledge of PAM, identity governance, and hybrid identity.
• Proficiency in PowerShell scripting and automation.
• Security hardening, incident response, and regulatory compliance.

Responsibilities

• Administer and secure Active Directory, Group Policy, DNS, PKI, and hybrid identity services.
• Manage identity lifecycle, access reviews, and Privileged Access Management (PAM).
• Implement MFA, SSO, passwordless authentication and certificate-based authentication; manage Kerberos, LDAP/LDAPS, SAML, OAuth 2.0, OIDC.
• Maintain AD forests, domain controllers, replication, trusts, password policies, and gMSA accounts.
• Secure Kubernetes environments using RBAC, workload identities, service accounts, and secrets management.
• Develop PowerShell automation for identity operations, compliance reporting, monitoring, and security auditing.
• Troubleshoot complex issues across Active Directory, DNS, PKI, authentication, Kubernetes, and Windows Server.
• Support incident response, root-cause analysis, security assessments, system hardening, audits, and compliance activities.

Skills

Active Directory

Group Policy

DNS

PKI

MFA

PAM

Kubernetes identity security

PowerShell scripting

Security hardening

Incident response

Tools

PowerShell

Kubernetes

OAuth 2.0 / OIDC

Job description

Location- Gurgaon (On site) We are looking for individuals who live and breathe establishing and maintaining a secure IT environment in a highly regulated industry. We are continuously improving our security posture, and you will be able to put your mark on the design of our infrastructure but should also be prepared to participate in the deployment, operation, and automation of the systems, which are heavily based on Microsoft technologies. Automation is a key aspect of our approach, and your ability to streamline processes will be crucial to our success. You will join a highly skilled team in India (Gurugram) with colleagues based in Copenhagen and other locations, where collaboration and continuous improvement are at the heart of our success. With new joiners, we aim to grow and diversify our team in the coming year. Working hours are aligned to India Standard Time, with flexibility to collaborate across time zones when needed.

Responsibilities

• Administer and secure Active Directory, Group Policy, DNS, PKI, and hybrid identity services.
• Manage identity lifecycle processes, access reviews, and Privileged Access Management (PAM).
• Implement modern authentication solutions, including MFA, passwordless authentication, SSO, FIDO2, Conditional Access, and certificate-based authentication.
• Manage authentication protocols such as Kerberos, LDAP/LDAPS, SAML, OAuth 2.0, and OIDC.
• Maintain Active Directory forests, domain controllers, replication, trusts, password policies, and gMSA accounts.
• Manage certificate lifecycles and troubleshoot PKI, CRL, OCSP, and certificate-validation issues.
• Secure Kubernetes environments using RBAC, workload identities, service accounts, and secrets management.
• Develop PowerShell automation for identity operations, compliance reporting, monitoring, and security auditing.
• Troubleshoot complex issues across Active Directory, DNS, PKI, authentication, Kubernetes, and Windows Server.
• Support incident response, root-cause analysis, security assessments, system hardening, audits, and compliance activities.

Your profile

• Active Directory, Group Policy, DNS, and PKI
• MFA, SSO, passwordless and certificate-based authentication
• PAM, identity governance, and hybrid identity
• Kubernetes identity security and access controls
• PowerShell scripting and automation
• Security hardening, troubleshooting, incident response, and compliance

You have 8-15 years of experience and strong hands-on expertise in: Active Directory, Group Policy, DNS, and PKI MFA, SSO, passwordless and certificate-based authentication PAM, identity governance, and hybrid identity Kubernetes identity security and access controls PowerShell scripting and automation Security hardening, troubleshooting, incident response, and compliance.

You are analytical, proactive, and committed to delivering secure, stable, and automated identity solutions.

We get curious people invested in the world.

When you work at Saxo, you become a Saxonian and part of a purpose-driven organisation, where good ideas are always taken seriously, and where you can make a true impact. We are invested in your development, and you can expect a robust career from day one when you join Saxo - no matter which role you take on. You will join 2,500 other ambitious colleagues across 11 countries and become part of an international organisation. Working in Saxo, you will get to meet colleagues from many different cultures and backgrounds, and you should know that we value diversity and inclusion and see it as a genuine source of strength to drive growth, foster innovation and position us for long-term success. We encourage an open feedback culture and supportive team environments enabling employees to grow and fulfil their career aspirations. When you bring passion, curiosity, drive and team spirit, your learning journey will be dynamic and your career opportunities in Saxo will be immense. At Saxo we don't just offer a job - we offer an opportunity to invest in your future!

About Saxo Bank Support our purpose We believe access to global capital markets is not only for the privileged few. Our vision is to enable people to fulfill their financial aspirations to make an impact. That's why we use the power of technology to deliver clients what they need, when they need it in a user-friendly and personalised experience. We aim to deliver the world's most user-friendly and personalized trading and investment platform experience, which gives our clients exactly what they need to make more informed investment decisions.

Be part of a unique journey Do you want to work for an extremely ambitious organisation at the cutting edge of banking and technology? You'll be joining a company that:

• Continuously strives to improve the Saxo Experience and exceed our clients' expectations.
• Always invests in the future
• Builds unrivalled platforms for seasoned and experienced investors and wholesale clients that provide real-time access to global capital markets.
• Consistently wins the highest accolades for our platforms, products and services.

Own your future So, if you're up for the challenge of breaking down barriers in global financial markets, we're always looking for ambitious and enthusiastic people who share our passion for clients, technology and innovation and can bring new perspectives to our diverse team. For more on our story, culture and identity, please read the Saxo Bank Foundation, written by our CEO and founder Kim Fournais. More about Saxo Bank