Principal Systems Engineer (Microsoft Active Directory Domains)

U.S. Bank National Association • Hopkins, MN

12d • Hybrid

About The Position

We are seeking a Principal Systems Engineer with strong experience in software engineering, automation, cloud platforms, and identity infrastructure to help modernize and scale our enterprise platform services. This role designs, engineers, and automates secure, highly available infrastructure and identity platforms across hybrid environments (on-prem + cloud). You will bring software engineering discipline to infrastructure, build automation-first solutions, and help move the organization toward self-service, scalable, and resilient platforms. You will work across teams including application engineering, security, platform, and operations to deliver solutions aligned with enterprise cloud, DevOps, and Zero Trust strategies.

Requirements

• Bachelor’s degree, or equivalent work experience
• At least 7 years of experience within a total information technology (IT) environment
• At least 7 years of experience with the design, development and support of technology infrastructure

Nice To Haves

• Experience designing and supporting complex enterprise infrastructure environments.
• Strong experience with automation and scripting or programming languages (e.g. PowerShell, Python, Go, Bash).
• Experience applying software development practices to infrastructure (CI/CD, Git, testing pipelines).
• Software & Automation : Experience with Infrastructure as Code (Terraform, Ansible, etc.).
• Experience building automation services or internal tools.
• Familiarity with REST APIs and service integration patterns.
• CI/CD tools: GitLab CI, Jenkins, Azure DevOps, GitHub, etc.
• Cloud & Platform Engineering: Experience in Azure or AWS (Identity, networking, compute, IAM, platform services).
• Knowledge of Kubernetes, containers, or modern platform services.
• Familiarity with service meshes or API gateways.
• Identity & Security Engineering: Deep experience with Active Directory, LDAP, Kerberos, Azure AD / Entra, IAM concepts.
• Experience with SSO, MFA, identity federation, and modern authentication models (OIDC, OAuth).
• Understanding of Zero Trust, PKI, and enterprise security practices.
• Infrastructure & Networking: Strong understanding of networking fundamentals (DNS, TCP/IP, load balancing, firewalls).
• Experience with HA/DR design, resilience engineering, and disaster recovery planning.

Responsibilities

• Manages large Microsoft Active Directory Domains.
• Defines and implements schema requirements.
• Manages Active Directory Group Policy Objects.
• Installs and upgrades directory server products.
• Evaluates and provides recommendations of current directories for capacity, network, security and disaster recovery.
• Performs backup and recovery procedures for the directories.
• Maintains support and design documentation.
• Provides technical support to other support personnel and end users.
• Provides rotating 24x7 on-call group support, responds to incidents.
• Participates in incident problem resolution root cause efforts.
• Participates in Audits and Disaster Recover exercises.
• Collaborates with Project Manages, System Integrators to provide project support.
• Works with Information Security personal.
• Understands Change Management procedures.

Benefits

• Healthcare (medical, dental, vision)
• Basic term and optional term life insurance
• Short-term and long-term disability
• Pregnancy disability and parental leave
• 401(k) and employer-funded retirement plan
• Paid vacation (from two to five weeks depending on salary grade and tenure)
• Up to 11 paid holiday opportunities
• Adoption assistance
• Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees