Principal Infrastructure Engineer

Overview

Principal Infrastructure Engineer role focused on establishing and maintaining a secure IT environment in a highly regulated industry, with a heavy Microsoft technology base and a strong automation focus.

What you'll do

• Administer and secure Active Directory, Group Policy, DNS, PKI, and hybrid identity services.
• Manage identity lifecycle processes, access reviews, and Privileged Access Management (PAM).
• Implement modern authentication solutions, including MFA, passwordless authentication, SSO, FIDO2, Conditional Access, and certificate-based authentication.
• Manage authentication protocols such as Kerberos, LDAP/LDAPS, SAML, OAuth 2.0, and OIDC.
• Maintain Active Directory forests, domain controllers, replication, trusts, password policies, and gMSA accounts.
• Manage certificate lifecycles and troubleshoot PKI, CRL, OCSP, and certificate-validation issues.
• Secure Kubernetes environments using RBAC, workload identities, service accounts, and secrets management.
• Develop PowerShell automation for identity operations, compliance reporting, monitoring, and security auditing.
• Troubleshoot complex issues across Active Directory, DNS, PKI, authentication, Kubernetes, and Windows Server.
• Support incident response, root-cause analysis, security assessments, system hardening, audits, and compliance activities.

What you'll need

• 8–15 years of experience.
• Strong hands-on expertise in Active Directory, Group Policy, DNS, and PKI.
• Strong hands-on expertise in MFA, SSO, passwordless and certificate-based authentication.
• Strong hands-on expertise in PAM, identity governance, and hybrid identity.
• Strong hands-on expertise in Kubernetes identity security and access controls.
• Strong hands-on expertise in PowerShell scripting and automation.
• Strong hands-on expertise in security hardening, troubleshooting, incident response, and compliance.
• Analytical, proactive, and committed to delivering secure, stable, and automated identity solutions.

Details

• Location: Gurgaon (on site), India (Gurugram).
• Working hours aligned to India Standard Time, with flexibility to collaborate across time zones when needed.
• Collaborates with colleagues based in Copenhagen and other locations.