Senior Active Directory & Identity Security Architect

mtb; Buffalo (NY); Hybrid; USD 97,000 - 162,000; Full time

Job summary

M&T Bank is recruiting for a senior Active Directory architect to design, secure, and operate AD DS in regulated, high-availability environments in Buffalo, NY. The role includes mentoring engineers and delivering complex identity projects in a highly controlled setting.

The candidate will work four days onsite at Seneca One Buffalo with one day of remote work weekly, focusing on hybrid identity, Entra ID, and security best practices. Strong regulatory experience is required.

Qualifications

• Bachelor's degree and 3+ years in AD engineering, or 7+ years combined education/experience.
• Proven expertise in large-scale AD, multi-domain/forest designs.
• Experience with Entra ID integration and hybrid identity security.

Responsibilities

• Design, secure, and operate AD DS in regulated, high-availability environments.
• Lead and mentor engineers on directory services and security.
• Implement automations with PowerShell for provisioning and audits.
• Ensure controls for regulatory frameworks (SOX, PCI DSS, SOC 2) through logging and audit readiness.

Skills

Active Directory

Azure AD

Security hardening

PowerShell

Regulatory compliance

Zero Trust

Education

Bachelor's degree / 7+ years experience

Tools

Entra Connect

Privileged Identity Management (PIM)

DNS tooling

Job description

M&T Bank is recruiting for a senior Active Directory architect to design, secure, and operate AD DS in regulated, high-availability environments in Buffalo, NY. The role includes mentoring engineers and delivering complex identity projects in a highly controlled setting.

The candidate will work four days onsite at Seneca One Buffalo with one day of remote work weekly, focusing on hybrid identity, Entra ID, and security best practices. Strong regulatory experience is required.