Remote Vault Administrator Jobs (NOW HIRING)

Job Description

Be a part of transformational change where integrity matters, success inspires and great teams collaborate and innovate. As the fifth-largest bank in the United States, we're one of the country's most respected, innovative, ethical and successful financial institutions. We're looking for people who want more than just a job - they want to make a difference! U.S. Bank is seeking a Software Engineer who will contribute toward the success of our technology initiatives in our digital transformation journey.
About the Team

The Enterprise Data Platform team builds and operates secure, compliant, and scalable data platforms that power analytics, reporting, and operational insights across the organization. We function as aplatform engineering organization, enabling domain teams to move fast throughselfservice infrastructure, strong governance, and automationfirst design.

We partner closely withCloud Engineering, IAM, Information Security, Networking, and FinOpsto ensure our Snowflake platform meets regulatory expectations while delivering a highquality developer experience. Our mission is to remove friction for data teams while enforcing enterprise standards through code, pipelines, and policy-not manual processes.

Job Responsibilities

• Design, build, and operate theenterprise Snowflake data platformsupporting multiple business domains (Finance, HR, Supply Chain)

• Own the Snowflakeplatform lifecycle, including account topology, RBAC, network architecture, governance, CI/CD automation, and disaster recovery

• Build and maintainmultiaccount Snowflake environments(PROD / NONPROD / DEV) on Snowflake Business Critical edition

• Implementsecure Azure Private Link connectivity, including private endpoints, Private DNS Zones, and network policy enforcement

• Develop and maintainTerraform modulesto automate provisioning of Snowflake resources (databases, schemas, warehouses, roles, tags, monitors, integrations)

• Enableselfservice platform consumptionthrough validated YAML manifests deployed via Shield CI/CD pipelines

• Integrate Snowflake withEntra ID (Azure AD)using SAML SSO, SCIM provisioning, and enterprise RBAC patterns

• Manage service account authentication, secrets, and key rotation usingHashiCorp Vaultand Azure Key Vault

• Enforcesecurity and compliance controls, including data masking, rowlevel security, object tagging, audit logging, and policyascode

• Embedinfrastructure and supplychain security scanninginto CI/CD pipelines (Checkov, tfsec, Semgrep, Snyk)

• Design forresiliency and cost efficiency, including warehouse sizing, resource monitors, cost allocation tags, and chargeback reporting

• Owncrossregion disaster recovery, replication strategies, and RPO/RTO adherence

• Governsecure data sharingpatterns and monitor data sharing usage and approvals

• Partner with Cloud, IAM, Security, and FinOps teams to ensure alignment with enterprise standards and regulatory requirements

Basic Qualifications

• Bachelor's degree, or equivalent work experience
• Six to eight years of relevant experience

Preferred Skills & Experience

• 5+ yearsof software engineering experience with a strong focus on infrastructure, platform, or cloudnative systems

• 2+ yearsof Snowflake administration at theaccount/platform level(beyond SQL development)

• AdvancedTerraformexpertise, including reusable module design, remote state management, provider versioning, and CI/CD integration

• Deep experience withAzure networking, including Private Link, VNet peering, Private DNS Zones, and Network Security Groups (NSGs)

• Strong background inidentity and access management, including Entra ID (Azure AD), SAML, SCIM, and OAuth 2.0

• Handson experience withsecrets managementusing HashiCorp Vault and/or Azure Key Vault

• Proven experience building and maintainingCI/CD pipelines, preferably GitLab CI, with policyascode enforcement

• Strongsecurity mindset, including RBAC design, leastprivilege access, and audit logging

Preferred Qualifications

• Snowflake certifications, such asSnowPro Advanced (Architect or Administrator)

• Experience withSnowflake Business Critical Edition, including TriSecret Secure and customermanaged keys

• Familiarity withCrowdStrike Falcon Shieldor similar SSPM/security posture management tools

• Experience with theDatabricks platform, including coexistence or integration architectures

• Background working infinancial services or regulated environments(SOX, GLBA, CCPA)

• Handson experience withIaC security scanning tools(e.g., Checkov, tfsec, Semgrep)

• Working knowledge ofKubernetes / AKS, particularly for workloads integrating with Snowflake

***This role requires working from a U.S. Bank location three (3) or more days per week.***