Designs, secures, operates, and governs enterprise Active Directory and hybrid Microsoft Entra ID environments in regulated financial services. Responsibilities include multi-forest architecture, identity security, compliance and audit readiness, PowerShell automation, replication and disaster recovery, monitoring, standards, escalation support, and mentoring engineers.
This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week
Overview:Responsible for designing, securing, and operating Microsoft Active Directory Domain Services (AD DS) in regulated, high-availability environments. Acts as knowledge resource for and trains less experienced engineers. Completes day-to-day support activities and special projects.
Primary Responsibilities:
- Enterprise Active Directory Architecture
- Proven expertise supporting large-scale, Tier‑1 identity infrastructures with strict uptime, latency, and change‑control requirements
- Strong experience with:
- Multi-domain and multi-forest designs aligned to business units, regions, or regulatory boundaries
- Forest and external trusts supporting M&A, joint ventures, and third-party integrations
- FSMO role placement optimized for resilience and auditability
- Advanced understanding of Active Directory–integrated DNS, split‑brain DNS, and secure name resolution models
- Hybrid Identity & Microsoft Entra ID (Azure AD)
- Extensive experience integrating on-prem AD with Microsoft Entra ID in regulated financial environments
- Hands-on implementation of:
- Entra Connect (Cloud Sync and Traditional)
- Password Hash Sync, Pass-through Authentication, and Federation
- Strong experience with:
- Conditional Access aligned to regulatory and risk-based controls
- Hybrid Join, Entra ID Join, and legacy device coexistence
- Understanding of identity lifecycle controls to support joiners, movers, leavers, and separation-of-duties requirements
- Security, Compliance & Risk Controls
- Expert-level knowledge of Active Directory security hardening in financial services, including:
- Tiered administrative model (Tier 0/1/2)
- Dedicated admin forests or hardened admin boundaries (where applicable)
- Privileged Access Workstations (PAWs) / Secure Admin Workstations
- Experience enforcing least privilege, role separation, and dual‑control models
- Deep familiarity with threats targeting financial institutions:
- Credential theft, Kerberoasting, Pass-the-Hash/Ticket
- Delegation and ACL abuse
- Hands-on experience with:
- Privileged Identity Management (PIM)
- Regular access reviews and entitlement recertification
- Strong alignment with Zero Trust and defense-in-depth identity strategies
- Expert-level knowledge of Active Directory security hardening in financial services, including:
- Regulatory & Audit Readiness
- Demonstrated experience supporting audits and controls for financial regulations and frameworks, such as:
- SOX, GLBA, PCI DSS, SOC 2
- Internal risk management and model governance requirements
- Ability to design AD environments that support:
- Strong logging and traceability
- Tamper-resistant audit logs
- Evidence generation for internal and external auditors
- Demonstrated experience supporting audits and controls for financial regulations and frameworks, such as:
- Automation & PowerShell
- Advanced PowerShell expertise for:
- Controlled, auditable administrative changes
- Automated provisioning/deprovisioning aligned to compliance workflows
- Identity reporting for risk, security, and audit teams
- Experience building automation that integrates with:
- Change management processes
- IAM, ticketing, and security tooling
- Advanced PowerShell expertise for:
- Operations, Resilience & Recovery
- Deep experience managing:
- AD replication topology across data centers and regions
- SYSVOL (DFSR) health and recovery
- Latency-sensitive authentication dependencies
- Strong understanding of:
- AD backup, recovery, and authoritative restore procedures
- Identity disaster recovery scenarios with defined RTO/RPO
- Experience implementing monitoring and alerting with a focus on early risk detection
- Deep experience managing:
- Leadership & Governance
- Acts as technical authority and escalation point for all directory and identity services
- Defines and enforces:
- Enterprise identity standards
- Secure configuration baselines
- Operational runbooks and procedures
- Partners closely with:
- Information Security and IAM teams
- Risk, audit, and compliance stakeholders
- Infrastructure, cloud, and application teams
- Mentors engineers and reviews designs from a security and risk-first perspective
Education and Experience Required:
- Bachelor's degree and a minimum of 5 years’ relevant work experience, or in lieu of a degree, a combined minimum of 9 years’ higher education and/or work experience
Education and Experience Preferred:
- Advanced understanding of the security system development and infrastructure lifecycle and architecture, and systems design
- Proven experience with the development and customization of tools utilized in assigned Cybersecurity function
- Demonstrated ability to translate architecture into technical requirements
- Proficient level of critical thinking and problem solving ability
- Excellent communication and interpersonal skills
- Experience partnering with leaders to design solutions to business needs.
- Proficient persuasive communication skills to gain buy-in of others
- Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources
- Ability effectively serves in indirect leadership role
M&T Bank New York, New York, USA Office
New York, United States, 0
M&T Bank Wayne, New Jersey, USA Office
Wayne, United States
Similar Jobs
Consumer Web • eCommerce • Information Technology • Retail • Software • Analytics • App development
Performs merchandising resets, display setup, signage and pricing updates, product staging, buyback preparation, and repairs in a Lowe’s store. Ensures merchandise is safely and attractively presented, assists customers with product information and locating items, communicates project priorities, and reports execution metrics. The role requires basic arithmetic, computer use, physical activity, occasional travel, and the ability to lift merchandise.
Top Skills:
DrillsHand ToolsLiftsOrder PickersPlanogramsPower EquipmentSawsWeb-Based Computer Programs
Consumer Web • eCommerce • Information Technology • Retail • Software • Analytics • App development
Provides friendly customer service in Lowe’s Building Materials department, helps customers locate and select products, processes orders and deliveries, replenishes merchandise, prepares materials such as lumber and drywall, and supports checkout and other store departments. The role requires computer and retail technology proficiency, basic arithmetic, physical lifting, prolonged standing, and occasional travel for meetings, training, or neighboring-store support.
Top Skills:
SmartphonesTablets
Consumer Web • eCommerce • Information Technology • Retail • Software • Analytics • App development
Provides customer service in Lowe’s Building Materials department by helping customers select products, locating and handling merchandise, replenishing shelves, processing orders, preparing materials, and supporting checkout. The role may involve loading merchandise, cross-training across store departments, prolonged standing, outdoor exposure, and lifting up to 75 pounds with assistance as needed.
Top Skills:
Retail TechnologySmartphonesTablets
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
