Senior Active Directory Architect — Hybrid Identity & Security

M&T Bank Corporation; Buffalo (NY); Hybrid; USD 97,000 - 162,000; Full time

Job summary

M&T Bank Corporation is seeking an expert to design, secure, and operate Microsoft Active Directory Domain Services in regulated, high-availability environments. The role trains engineers, handles day-to-day support, and drives key identity projects.

Role requires extensive AD expertise, hybrid identity with Entra ID, and strong focus on security, audits, and remediation. Location is Buffalo, NY with four days onsite and one day remote per week.

Qualifications

• Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience
• Intermediate understanding of the security system development and infrastructure lifecycle and architecture, and systems design
• Proven experience translating architecture into technical requirements.

Responsibilities

• Enterprise Active Directory Architecture
• Proven expertise supporting large-scale, Tier-1 identity infrastructures with strict uptime, latency, and change-control requirements
• Forest and external trusts supporting M&A, joint ventures, and third-party integrations
• Hands-on implementation of: Entra Connect (Cloud Sync and Traditional) Password Hash Sync, Pass-through Authentication, and Federation

Skills

Active Directory Architecture

Azure AD Entra ID

PowerShell

Security & Risk Controls

Audits & Compliance

Education

Bachelor's degree

Tools

Entra Connect

Privileged Access Management (PIM)

Job description

M&T Bank Corporation is seeking an expert to design, secure, and operate Microsoft Active Directory Domain Services in regulated, high-availability environments. The role trains engineers, handles day-to-day support, and drives key identity projects.

Role requires extensive AD expertise, hybrid identity with Entra ID, and strong focus on security, audits, and remediation. Location is Buffalo, NY with four days onsite and one day remote per week.