Senior Active Directory Engineer - Hybrid Identity

M&T Bank; South Dakota; Hybrid; USD 116,000 - 194,000; Full time

Job summary

M&T Bank is seeking an experienced Enterprise Identity and AD specialist to design, secure, and operate Microsoft AD DS in regulated environments. You will mentor engineers, handle day-to-day support, and lead high-availability identity projects.

The role supports hybrid work with four days onsite at Seneca One Buffalo, NY and one day remote per week, focusing on Zero Trust, Entra ID, and automation to sustain regulatory compliance and strong security posture.

Qualifications

• Bachelor’s degree or equivalent experience required.
• Strong experience with large-scale identity infrastructures.
• Proven ability to design secure AD environments and support audits.

Responsibilities

• Design, secure, and operate AD DS in regulated, high-availability environments.
• Train and mentor engineers; act as technical authority.
• Lead in remediation, change control, and risk reduction for identity services.

Skills

AD architecture

Entra ID / Azure AD

PowerShell

Zero Trust

Identity lifecycle controls

Security & compliance

Automation & scripting

Leadership & governance

Audits & regulatory frameworks

Hybrid/remote work coordination

Education

Bachelor’s degree or equivalent experience

Tools

Entra Connect

Azure AD

Job description

M&T Bank is seeking an experienced Enterprise Identity and AD specialist to design, secure, and operate Microsoft AD DS in regulated environments. You will mentor engineers, handle day-to-day support, and lead high-availability identity projects.

The role supports hybrid work with four days onsite at Seneca One Buffalo, NY and one day remote per week, focusing on Zero Trust, Entra ID, and automation to sustain regulatory compliance and strong security posture.