Senior Active Directory & Identity Architect

M&T Bank Corporation; Buffalo (NY); Hybrid; USD 116,000 - 194,000; Full time

Benefits offered by this job

Medical benefits

Retirement plan

Volunteer time off

Job summary

M&T Bank Corporation in Buffalo, NY is seeking an experienced Senior Active Directory Architect/Engineer to design, secure, and operate AD DS in regulated financial environments. You will train junior engineers, handle day-to-day support, and lead high‑availability identity projects.

Hybrid role with four days on-site and one remote per week, requiring strong migration, security, and audit readiness skills, including Entra ID, PIM, and tiered admin controls.

Qualifications

• Bachelor's degree or equivalent work experience required; 5+ years in directory services.
• Proven architecture and engineering experience with large-scale AD environments.
• Strong understanding of regulatory controls (SOX, PCI DSS) and audit readiness.

Responsibilities

• Design, secure, and operate Microsoft AD DS in regulated environments.
• Lead hybrid identity projects, including Entra ID integration.
• Mentor engineers and ensure change-control compliance.
• Implement and enforce least privilege and separation of duties controls.
• Oversee AD replication, DNS integration, and disaster recovery planning.

Skills

Active Directory

Azure AD Entra ID

PowerShell

Zero Trust

Privileged Access Management

SOX compliance

Identity governance

Hybrid identity

Audits & controls

Security tooling

Education

Bachelor's degree

Tools

Entra Connect

Azure AD Connect

PAWs

AD DS

DFSR

Privileged Identity Management (PIM)

Job description

M&T Bank Corporation in Buffalo, NY is seeking an experienced Senior Active Directory Architect/Engineer to design, secure, and operate AD DS in regulated financial environments. You will train junior engineers, handle day-to-day support, and lead high‑availability identity projects.

Hybrid role with four days on-site and one remote per week, requiring strong migration, security, and audit readiness skills, including Entra ID, PIM, and tiered admin controls.