Senior Active Directory Architect & Identity Security Lead

M&T Bank; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

M&T Bank is seeking an experienced AD DS architect to design, secure, and operate big-scale Active Directory in a regulated, high-availability setting. The role includes mentoring engineers and leading identity initiatives in partnership with Information Security and IAM teams.

The position requires strong PowerShell scripting, automation, and experience with Entra Connect/Azure AD. Hybrid work is available with four days onsite in Buffalo, NY and one day remote per week.

Qualifications

• Bachelor's degree and a minimum of 5 years' relevant work experience, or a combined minimum of 9 years' higher education and/or work experience
• Experience designing and operating large-scale Active Directory in regulated environments
• Strong knowledge of multi-domain/multi-forest designs and AD security controls

Responsibilities

• Design, secure, and operate Microsoft AD DS in regulated, high-availability environments
• Lead and train junior engineers in identity and AD best practices
• Support audits and regulatory compliance through robust logging, reporting, and change control

Skills

Active Directory

PowerShell

Automation

Zero Trust

Audit readiness

Education

Bachelor's degree or equivalent

Tools

Entra Connect

Azure AD

PIM

Job description

M&T Bank is seeking an experienced AD DS architect to design, secure, and operate big-scale Active Directory in a regulated, high-availability setting. The role includes mentoring engineers and leading identity initiatives in partnership with Information Security and IAM teams.

The position requires strong PowerShell scripting, automation, and experience with Entra Connect/Azure AD. Hybrid work is available with four days onsite in Buffalo, NY and one day remote per week.