Apply Now

Lead Active Directory Engineer

Wilmington, DE, US • Posted 60+ days ago • Updated 12 hours ago

Full Time

On-site

USD $128,100.00 - 213,500.00 per year

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

DirectShow
DS
High Availability
Tier 1
Change Control
Mergers and Acquisitions
DNS
Dragon NaturallySpeaking
Microsoft Azure
Microsoft
Active Directory
Hardening
Financial Services
PASS
Delegation
ACL
Identity Management
PIM
Finance
Sarbanes-Oxley
Gramm-Leach-Bliley Act
PCI DSS
System On A Chip
Risk Management
Windows PowerShell
Provisioning
Workflow
Reporting
Change Management
Management
Replication
Data Centers
Authentication
Backup
Recovery
Disaster Recovery
RPO
FOCUS
Information Security
Auditing
Regulatory Compliance
Cloud Computing
Higher Education
Systems Design
Customization
Cyber Security
Critical Thinking
Problem Solving
Conflict Resolution
Communication
Leadership

DirectShow
DS
High Availability
Tier 1
Change Control
Mergers and Acquisitions
DNS
Dragon NaturallySpeaking
Microsoft Azure
Microsoft
Active Directory
Hardening
Financial Services
PASS
Delegation
ACL
Identity Management
PIM
Finance
Sarbanes-Oxley
Gramm-Leach-Bliley Act
PCI DSS
System On A Chip
Risk Management
Windows PowerShell
Provisioning
Workflow
Reporting
Change Management
Management
Replication
Data Centers
Authentication
Backup
Recovery
Disaster Recovery
RPO
FOCUS
Information Security
Auditing
Regulatory Compliance
Cloud Computing
Higher Education
Systems Design
Customization
Cyber Security
Critical Thinking
Problem Solving
Conflict Resolution
Communication
Leadership

Summary

This role is four days onsite at our Wilmington, DE Tech Hub location, with the flexibility to work from home one day per week
Overview:

Responsible for designing, securing, and operating Microsoft Active Directory Domain Services (AD DS) in regulated, high-availability environments. Acts as knowledge resource for and trains less experienced engineers. Completes day-to-day support activities and special projects.

Primary Responsibilities:

Enterprise Active Directory Architecture

Proven expertise supporting large-scale, Tier-1 identity infrastructures with strict uptime, latency, and change-control requirements
Strong experience with:
- Multi-domain and multi-forest designs aligned to business units, regions, or regulatory boundaries
- Forest and external trusts supporting M&A, joint ventures, and third-party integrations
- FSMO role placement optimized for resilience and auditability
Advanced understanding of Active Directory-integrated DNS, split-brain DNS, and secure name resolution models

Hybrid Identity & Microsoft Entra ID (Azure AD)

Extensive experience integrating on-prem AD with Microsoft Entra ID in regulated financial environments
Hands-on implementation of:
- Entra Connect (Cloud Sync and Traditional)
- Password Hash Sync, Pass-through Authentication, and Federation
Strong experience with:
- Conditional Access aligned to regulatory and risk-based controls
- Hybrid Join, Entra ID Join, and legacy device coexistence
Understanding of identity lifecycle controls to support joiners, movers, leavers, and separation-of-duties requirements

Security, Compliance & Risk Controls

Expert-level knowledge of Active Directory security hardening in financial services, including:
- Tiered administrative model (Tier 0/1/2)
- Dedicated admin forests or hardened admin boundaries (where applicable)
- Privileged Access Workstations (PAWs) / Secure Admin Workstations
Experience enforcing least privilege, role separation, and dual-control models
Deep familiarity with threats targeting financial institutions:
- Credential theft, Kerberoasting, Pass-the-Hash/Ticket
- Delegation and ACL abuse
Hands-on experience with:
- Privileged Identity Management (PIM)
- Regular access reviews and entitlement recertification
Strong alignment with Zero Trust and defense-in-depth identity strategies

Regulatory & Audit Readiness

Demonstrated experience supporting audits and controls for financial regulations and frameworks, such as:
- SOX, GLBA, PCI DSS, SOC 2
- Internal risk management and model governance requirements
Ability to design AD environments that support:
- Strong logging and traceability
- Tamper-resistant audit logs
- Evidence generation for internal and external auditors

Automation & PowerShell

Advanced PowerShell expertise for:
- Controlled, auditable administrative changes
- Automated provisioning/deprovisioning aligned to compliance workflows
- Identity reporting for risk, security, and audit teams
Experience building automation that integrates with:
- Change management processes
- IAM, ticketing, and security tooling

Operations, Resilience & Recovery

Deep experience managing:
- AD replication topology across data centers and regions
- SYSVOL (DFSR) health and recovery
- Latency-sensitive authentication dependencies
Strong understanding of:
- AD backup, recovery, and authoritative restore procedures
- Identity disaster recovery scenarios with defined RTO/RPO
Experience implementing monitoring and alerting with a focus on early risk detection

Leadership & Governance

Acts as technical authority and escalation point for all directory and identity services
Defines and enforces:
- Enterprise identity standards
- Secure configuration baselines
- Operational runbooks and procedures
Partners closely with:
- Information Security and IAM teams
- Risk, audit, and compliance stakeholders
- Infrastructure, cloud, and application teams
Mentors engineers and reviews designs from a security and risk-first perspective

Education and Experience Required:

Bachelor's degree and a minimum of 5 years' relevant work experience, or in lieu of a degree, a combined minimum of 9 years' higher education and/or work experience

Education and Experience Preferred:

Advanced understanding of the security system development and infrastructure lifecycle and architecture, and systems design
Proven experience with the development and customization of tools utilized in assigned Cybersecurity function
Demonstrated ability to translate architecture into technical requirements
Proficient level of critical thinking and problem solving ability
Excellent communication and interpersonal skills
Experience partnering with leaders to design solutions to business needs.
Proficient persuasive communication skills to gain buy-in of others
Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources
Ability effectively serves in indirect leadership role

#LI-JB3 #Hybrid

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $128,100.00 - $213,500.00 (USD). The successful candidate's particular combination of knowledge, skills, and experience will inform their specific compensation.

Location
Wilmington, Delaware, United States of America

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 80180520
Position Id: d1a4c963ed60b77b130cdb24a4f3e501
Posted 30+ days ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Philadelphia, Pennsylvania

•

10d ago

Job Description As our Engineering Lead, Global Directory Services, you will lead a globally distributed team of directory services engineers across the United States, Monterrey, Mexico, and Manila, Philippines. Reporting to our Leader, Global Directory Services, and partnering closely with our Global Directory Services Operations Lead, you will shape and execute the enterprise directory services strategy across on premises Active Directory, Microsoft Entra, and hybrid identity environments. We

Full-time

Mid-Level Microsoft Engineer/Hybrid Malvern

Malvern, Pennsylvania

•

Today

A growing Financial organization based in Malvern, PA is looking to hire a Mid-Level Microsoft Engineer to join its IT infrastructure team. This is a full-time, hybrid opportunity requiring three days onsite each week. You'll support and enhance the Microsoft 365 environment, working with technologies including Exchange Online, Entra ID (Azure AD), Intune, SharePoint Online, Teams, and the broader Microsoft Workspace suite to ensure a secure and reliable end-user experience. Required Skills & E

Easy Apply

Full-time

$90000 - $100000

Senior Security Architect – Active Directory

Remote

•

25d ago

Job Title: Senior Security Architect Active DirectoryExperience: 15+ YearsEmployment Type: Full-TimeWe are seeking a highly experienced Senior Security Architect with deep expertise in Microsoft Active Directory (AD) and enterprise security architecture. The ideal candidate will be a strategic thinker and recognized technical leader who can design, secure, and modernize enterprise identity infrastructure while partnering closely with executive leadership, including the CTO.Key ResponsibilitiesL

Easy Apply

Full-time

140,000+

Lead Site Reliability Engineer - Active Directory

Remote

•

Today

Coupa makes margins multiply through its community-generated AI and industry-leading total spend management platform for businesses large and small. Coupa AI is informed by trillions of dollars of direct and indirect spend data across a global network of 10M+ buyers and suppliers. We empower you with the ability to predict, prescribe, and automate smarter, more profitable business decisions to improve operating margins. Why join Coupa? Pioneering Technology: At Coupa, we're at the forefront of

Full-time

USD 125,000.00 - 174,333.00 per year

Search all similar jobs

More jobs at M&T BANK CORPORATION in Wilmington, DE

Lead Active Directory Engineer

Dice Job Match Score™

Job Details

Skills

Summary

Similar Jobs