Location - Gurgaon (Onsite)
We are seeking a technical expert to establish and maintain a secure IT environment within a highly regulated industry. As a Principal Infrastructure Engineer, you will shape the strategic direction of our infrastructure design and lead its deployment, operation, and automation. You will work with a highly skilled team of 12 in Gurgaon and collaborate closely with a counterpart team in Denmark.
Responsibilities
- Drive strategic projects to enhance and fortify the Bank's infrastructure, focusing on Microsoft technologies both on-premises and in Azure.
- Architect and implement a tiered IT environment with robust identity management.
- Develop, automate, and maintain Active Directory infrastructure, Azure Active Directory, Microsoft Defender for Identity, Microsoft Defender for Endpoints, Azure AD Connect, Active Directory-based PKI infrastructure, Active Directory disaster recovery planning, and Active Directory Security Hardening (e.g., Tiering).
- Implement multi-factor authentication, single sign-on, identity management, and related technologies.
- Establish and maintain comprehensive monitoring of security-related processes.
- Lead hardening projects and implement HSM, focusing on enhancements like SPA, PAW, PAM, and micro-segmentation.
- Design, build, and expand PKI services, including certificate management and CA security practices.
- Develop interfaces with the Venafi Trust Protection Platform and automate secure PKI practices.
- Collaborate with global teams to streamline processes and align solutions with organizational strategy.
Your Profile
- Extensive experience in enterprise-scale international production environments.
- Proven experience of 10+ years in infrastructure engineering with a strong focus on automation and scripting.
- Expertise in the administration of Active Directory (AD) and GPOs.
- In-depth knowledge of ADFS, AD Connect, PKI, DNS, DHCP, DFS.
- Strong understanding of infrastructure and server configuration principles, application infrastructure standards, networking fundamentals, Windows, physical server architecture, and virtualization technologies (Hyper-V).
- Proficiency in Windows Server, Hyper-V, Azure.
- Advanced PowerShell scripting and Git skills.
- Experience with automation tools and frameworks.
- Software development experience and knowledge (e.g., C#, .NET Core).
- Excellent written and spoken English communication skills.
- Relevant educational background.
