Lead Active Directory Engineer

* Proven expertise supporting **large-scale, Tier‐1 identity infrastructures** with strict uptime, latency, and change‐control requirements* Strong experience with: + Multi-domain and multi-forest designs aligned to business units, regions, or regulatory boundaries + Forest and external trusts supporting M&A, joint ventures, and third-party integrations + FSMO role placement optimized for resilience and auditability* Advanced understanding of **Active Directory–integrated DNS**, split‐brain DNS, and secure name resolution models* Extensive experience integrating on-prem AD with **Microsoft Entra ID** in regulated financial environments* Hands-on implementation of: + Entra Connect (Cloud Sync and Traditional) + Password Hash Sync, Pass-through Authentication, and Federation* Strong experience with: + Conditional Access aligned to regulatory and risk-based controls + Hybrid Join, Entra ID Join, and legacy device coexistence* Understanding of **identity lifecycle controls** to support joiners, movers, leavers, and separation-of-duties requirements- Expert-level knowledge of **Active Directory security hardening** in financial services, including: * Tiered administrative model (Tier 0/1/2) * Dedicated admin forests or hardened admin boundaries (where applicable) * Privileged Access Workstations (PAWs) / Secure Admin WorkstationsExperience enforcing **least privilege**, role separation, and **dual‐control** models- Deep familiarity with threats targeting financial institutions: * Credential theft, Kerberoasting, Pass-the-Hash/Ticket * Delegation and ACL abuse- Hands-on experience with: * Privileged Identity Management (PIM) * Regular access reviews and entitlement recertification- Demonstrated experience supporting audits and controls for financial regulations and frameworks, such as: * SOX, GLBA, PCI DSS, SOC 2 * Internal risk management and model governance requirements- Ability to design AD environments that support: * Strong logging and traceability * Tamper-resistant audit logs * Evidence generation for internal and external auditors- Experience building automation that integrates with: * Change management processes * IAM, ticketing, and security tooling* Strong understanding of: + AD backup, recovery, and **authoritative restore procedures** + Identity disaster recovery scenarios with defined RTO/RPO* Experience implementing **monitoring and alerting** with a focus on early risk detection- Deep experience managing: * AD replication topology across data centers and regions * SYSVOL (DFSR) health and recovery * Latency-sensitive authentication dependencies* Advanced understanding of the security system development and infrastructure lifecycle and architecture, and systems design* Proven experience with the development and customization of tools utilized in assigned Cybersecurity function* Demonstrated ability to translate architecture into technical requirements* Proficient level of critical thinking and problem solving ability* Excellent communication and interpersonal skills* Experience partnering with leaders to design solutions to business needs.* Proficient persuasive communication skills to gain buy-in of others* Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources* Ability effectively serves in indirect leadership roleGreat companies have an enduring sense of purpose. At M&T, our purpose is a simple one: **make a difference in people’s lives and uplift the communities we serve**. M&T Bank Corporation is a financial holding company headquartered in Buffalo, New York. M&T’s affiliates offer advice, guidance, expertise and solutions across the entire financial spectrum, combining M&T Bank’s traditional banking services with the wealth management and institutional capabilities offered by Wilmington Trust. M&T Bank has a network of over 1,000 branches and 2,200 ATMs that span 12 states from Maine to Virginia and Washington, D.C. For more than 165 years, M&T has strived to take an active role in our communities and build long-lasting relationships with our customers. We are a bank for communities—combining the capabilities of a large bank with the care of a locally focused institution. #J-18808-Ljbffr M&T Bank