Full-Time
Lead Active Directory Engineer
M&T Bank
10,001+ employees
Full-service banking with mortgage, deposits, loans
Compensation Overview
$116.4k - $194k/yr
Buffalo, NY, USA
Hybrid
Four days on-site per week; one work-from-home day per week.
Bachelor's
 IT Operations (1) |
|---|
Get referred to M&T Bank
See people who can refer or advise you
- Proven expertise supporting large-scale, Tier-1 identity infrastructures with strict uptime, latency, and change-control requirements.
- Strong experience with multi-domain and multi-forest designs aligned to business units, regions, or regulatory boundaries.
- Strong experience with forest and external trusts supporting mergers and acquisitions, joint ventures, and third-party integrations.
- Strong experience with FSMO role placement optimized for resilience and auditability.
- Advanced understanding of Active Directory-integrated DNS, split-brain DNS, and secure name resolution models.
- Extensive experience integrating on-premises Active Directory with Microsoft Entra ID in regulated financial environments.
- Hands-on experience implementing Entra Connect Cloud Sync and Traditional, Password Hash Sync, Pass-through Authentication, and Federation.
- Strong experience with Conditional Access, Hybrid Join, Entra ID Join, and legacy device coexistence.
- Understanding of identity lifecycle controls supporting joiners, movers, leavers, and separation-of-duties requirements.
- Expert-level knowledge of Active Directory security hardening in financial services, including tiered administrative models, dedicated admin forests or hardened admin boundaries, and Privileged Access Workstations or Secure Admin Workstations.
- Experience enforcing least privilege, role separation, and dual-control models.
- Deep familiarity with credential theft, Kerberoasting, Pass-the-Hash, Pass-the-Ticket, delegation abuse, and ACL abuse targeting financial institutions.
- Hands-on experience with Privileged Identity Management, regular access reviews, and entitlement recertification.
- Strong alignment with Zero Trust and defense-in-depth identity strategies.
- Demonstrated experience supporting audits and controls for SOX, GLBA, PCI DSS, SOC 2, and internal risk management and model governance requirements.
- Ability to design Active Directory environments supporting strong logging and traceability, tamper-resistant audit logs, and evidence generation for auditors.
- Advanced PowerShell expertise for controlled and auditable administrative changes, automated provisioning and deprovisioning aligned to compliance workflows, and identity reporting.
- Experience building automation that integrates with change management processes, IAM, ticketing, and security tooling.
- Deep experience managing Active Directory replication topology across data centers and regions, SYSVOL DFSR health and recovery, and latency-sensitive authentication dependencies.
- Strong understanding of Active Directory backup, recovery, authoritative restore procedures, and identity disaster recovery scenarios with defined RTO and RPO.
- Experience implementing monitoring and alerting focused on early risk detection.
- Bachelor's degree and a minimum of 5 years of relevant work experience, or, in lieu of a degree, a combined minimum of 9 years of higher education and/or work experience.
- Design, secure, and operate Microsoft Active Directory Domain Services in regulated, high-availability environments.
- Act as a knowledge resource for and train less experienced engineers.
- Complete day-to-day support activities and special projects.
- Act as the technical authority and escalation point for all directory and identity services.
- Define and enforce enterprise identity standards, secure configuration baselines, and operational runbooks and procedures.
- Partner with Information Security, IAM, risk, audit, compliance, infrastructure, cloud, and application teams.
- Mentor engineers and review designs from a security- and risk-first perspective.
- Advanced understanding of security system development and infrastructure lifecycle, architecture, and systems design.
- Proven experience developing and customizing tools utilized in an assigned Cybersecurity function.
- Demonstrated ability to translate architecture into technical requirements.
- Proficient critical-thinking and problem-solving ability.
- Excellent communication and interpersonal skills.
- Experience partnering with leaders to design solutions to business needs.
- Proficient persuasive communication skills to gain buy-in from others.
- Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources.
- Ability to effectively serve in an indirect leadership role.
M&T Bank is a full-service financial institution that offers a wide range of banking solutions for individuals, small businesses, and larger enterprises. Its products include personal and business checking accounts, mortgage assistance programs, loans, deposits, investment products, and mobile banking. The bank serves mainly customers in the Northeastern and Mid-Atlantic United States and emphasizes community engagement and customer-focused service. It generates revenue from interest income, fees, and service charges tied to loans, deposits, and other financial products. The company’s recent merger with United Bank, N.A. expands its footprint and enhances its service offerings. The goal is to provide accessible financial services to communities while growing its market presence and deepening local connections.
Company Size
10,001+
Company Stage
IPO
Headquarters
Buffalo, New York
Founded
1993
Get referred to M&T Bank
See people who can refer or advise you
Simplify's Take
What believers are saying
- Q2 2026 revenue reached $2.52 billion, beating consensus and rising 4.9% year over year.
- Q2 2026 net income hit $818 million, while net charge-offs declined to $80 million.
- A July 2026 app update added smoother navigation, biometric login, and configurable alerts.
What critics are saying
- Commercial real estate grew $1.1 billion in Q2 2026, increasing credit-cycle exposure.
- CET1 fell to 10.19% after $1.25 billion buybacks and $465 million repurchases.
- Fintech lenders and digital-first banks pressure fee income, deposits, and branch economics by 2027.
What makes M&T Bank unique
- M&T pairs regional deposits with commercial lending across the Northeast and Mid-Atlantic.
- Its 2026 mobile app refresh strengthens sticky retail relationships and daily transaction usage.
- Decades of community banking and multilingual branch programs deepen local trust and cross-sell opportunities.
Help us improve and share your feedback! Did you find this helpful?
Benefits
401(k) Company Match
401(k) Retirement Plan
Flexible Work Hours
Hybrid Work Options
Paid Vacation
Paid Holidays
Health Insurance
Dental Insurance
Vision Insurance
Life Insurance
Disability Insurance
Health Savings Account/Flexible Spending Account
Growth & Insights and Company News
6 month growth
↑ 10%1 year growth
↑ 10%2 year growth
↑ 10%Cari, the bank-governed digital money network, today announced it has raised $32.5 million in the first tranche of its initial external funding round, with t...
Regional banks delivered mixed second-quarter results, with revenues matching analyst expectations on average. M&T Bank reported revenues of $2.52 billion, up 4.9% year on year and exceeding consensus estimates by 1.9%. The bank also beat earnings per share projections and narrowly surpassed net interest income forecasts. Despite the strong quarter, M&T Bank's shares fell 1.3% following the announcement, trading at $238.67. The decline suggests investor expectations may have been higher than published Wall Street projections. Regional banks as a group have struggled, with share prices down an average of 1.5% since their latest earnings releases. These institutions face challenges including fintech competition, deposit outflows, credit deterioration, regulatory costs, and concerns about commercial real estate exposure following recent high-profile bank failures.
Charles River Associates has expanded its credit facility to $400 million through a six-bank lending syndicate. The five-year agreement includes a $75 million term loan and a $325 million revolving credit facility, replacing a previous $300 million facility set to mature in August 2027. The revolving facility can be reduced to $250 million between 16 July and 15 January each year when working-capital requirements are lower. CRA will use proceeds to repay outstanding borrowings, support working capital, fund growth investments, and cover general corporate purposes. The lending group includes Bank of America, Citizens Financial Group, Eastern Bank, and Beacon Bank & Trust, with BMO and M&T Bank joining as new lenders. The expanded facility provides additional liquidity as the consulting firm invests in its global economic, financial, and management advisory operations.
Merritt Properties has secured a $621 million refinancing loan for a portion of its 58-asset Maryland Industrial Portfolio.
M&T Bank Corporation recently completed a US$600 million callable preferred depositary share offering, sold in two tranches totaling 24,000,000 shares at US$25 each, with multiple major banks, including J.P. Morgan, BofA Securities and others, acting as co‑lead underwriters. Around the same time, M&T Bank reported higher second‑quarter 2026 net interest income of US$1,792 million and net income of US$818 million, while also reducing net charge‑offs to US$80 million and completing a US$465...