Senior AD & Identity Engineer (Hybrid, FinServ)

M&T Bank Corporation; Buffalo (NY); Hybrid; USD 97,000 - 162,000; Full time

Benefits offered by this job

Volunteer time off

Competitive benefits

Job summary

M&T Bank Corporation is seeking a Senior AD DS Engineer to design, secure, and operate Microsoft Active Directory Domain Services in regulated environments. You will train engineers, handle day-to-day support, and lead critical identity projects.

The role emphasizes enterprise AD architecture, hybrid identity with Entra ID, and strong risk-management practices to meet SOX, GLBA, PCI DSS, and SOC 2 requirements. Buffalo, NY location with hybrid work options.

Qualifications

• Bachelor's degree or 7+ years' combined education/work experience.
• Strong AD architecture and hybrid identity experience.
• Experience with regulatory audits (SOX, PCI, SOC 2) and risk controls.

Responsibilities

• Design enterprise Active Directory architecture and governance.
• Support large-scale identity infrastructure with high uptime requirements.
• Mentor engineers and serve as escalation point for identity services.
• Ensure logging, audit trails, and change controls meet regulatory standards.

Skills

Enterprise AD Architecture

Identity & Access Management

PowerShell scripting

Zero Trust security

Audit & compliance

Leadership

Education

Bachelor's degree

7+ years combined education/work

Tools

Entra Connect

Azure AD

Privileged Identity Management (PIM)

Conditional Access

Job description

M&T Bank Corporation is seeking a Senior AD DS Engineer to design, secure, and operate Microsoft Active Directory Domain Services in regulated environments. You will train engineers, handle day-to-day support, and lead critical identity projects.

The role emphasizes enterprise AD architecture, hybrid identity with Entra ID, and strong risk-management practices to meet SOX, GLBA, PCI DSS, and SOC 2 requirements. Buffalo, NY location with hybrid work options.