Principal Systems Engineer (microsoft Active Directory Domains)

Principal Systems Engineer

At U.S. Bank, we're on a journey to do our best. Helping the customers and businesses we serve to make better and smarter financial decisions and enabling the communities we support to grow and succeed. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bank gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

We are seeking a Principal Systems Engineer with strong experience in software engineering, automation, cloud platforms, and identity infrastructure to help modernize and scale our enterprise platform services. This role designs, engineers, and automates secure, highly available infrastructure and identity platforms across hybrid environments (on-prem + cloud). You will bring software engineering discipline to infrastructure, build automation-first solutions, and help move the organization toward self-service, scalable, and resilient platforms. You will work across teams including application engineering, security, platform, and operations to deliver solutions aligned with enterprise cloud, DevOps, and Zero Trust strategies.

Responsibilities

• Manages large Microsoft Active Directory Domains.
• Defines and implements schema requirements.
• Manages Active Directory Group Policy Objects.
• Installs and upgrades directory server products.
• Evaluates and provides recommendations of current directories for capacity, network, security and disaster recovery.
• Performs backup and recovery procedures for the directories.
• Maintains support and design documentation.
• Provides technical support to other support personnel and end users.
• Provides rotating 24x7 on-call group support, responds to incidents.
• Participates in incident problem resolution root cause efforts.
• Participates in Audits and Disaster Recover exercises.
• Collaborates with Project Manages, System Integrators to provide project support.
• Works with Information Security personal.
• Understands Change Management procedures.

Basic Qualifications

• Bachelor’s degree, or equivalent work experience.
• At least 7 years of experience within a total information technology (IT) environment.
• At least 7 years of experience with the design, development and support of technology infrastructure.

Preferred Skills/Experience

• Experience designing and supporting complex enterprise infrastructure environments.
• Strong experience with automation and scripting or programming languages (e.g. PowerShell, Python, Go, Bash).
• Experience applying software development practices to infrastructure (CI/CD, Git, testing pipelines).
• Software & Automation: Experience with Infrastructure as Code (Terraform, Ansible, etc.).
• Experience building automation services or internal tools.
• Familiarity with REST APIs and service integration patterns.
• CI/CD tools: GitLab CI, Jenkins, Azure DevOps, GitHub, etc.
• Cloud & Platform Engineering: Experience in Azure or AWS (Identity, networking, compute, IAM, platform services).
• Knowledge of Kubernetes, containers, or modern platform services.
• Familiarity with service meshes or API gateways.
• Identity & Security Engineering: Deep experience with Active Directory, LDAP, Kerberos, Azure AD / Entra, IAM concepts.
• Experience with SSO, MFA, identity federation, and modern authentication models (OIDC, OAuth).
• Understanding of Zero Trust, PKI, and enterprise security practices.
• Infrastructure & Networking: Strong understanding of networking fundamentals (DNS, TCP/IP, load balancing, firewalls).
• Experience with HA/DR design, resilience engineering, and disaster recovery planning.

This role requires working from a U.S. Bank location three (3) or more days per week. If there's anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our disability accommodations for applicants.

Our approach to benefits and total rewards considers our team members' whole selves and what may be needed to thrive in and outside work. That's why our benefits are designed to help you and your family boost your health, protect your financial security and give you peace of mind. Our benefits include the following (some may vary based on role, location or hours):

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

U.S. Bank is an equal opportunity employer. We consider all qualified applicants without regard to race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and other factors protected under applicable law.

The salary range reflects figures based on the primary location, which is listed first. The actual range for the role may differ based on the location of the role. In addition to salary, U.S. Bank offers a comprehensive benefits package, including incentive and recognition programs, equity stock purchase 401(k) contribution and pension (all benefits are subject to eligibility requirements). Pay Range: $119,765.00 - $140,900.00