Search Jobs | Dice.com

27 results (0 new)

Group by company

Lead Active Directory Engineer

M&T BANK CORPORATION

Buffalo, New York • Today

Full-time

USD 116,400.00 - 194,000.00 per year

Senior Active Directory Engineer

M&T BANK CORPORATION

Buffalo, New York • Today

Full-time

USD 97,100.00 - 161,800.00 per year

Authentication Engineer (Entra / AD) - 3667093

Lighthouse Technology Services

Buffalo, New York • Today

Full-time

USD 70.00 - 75.00 per hour

Senior Active Directory Engineer (Only Visa Independent Candidate/W2)

SumasEdge Corporation

Remote • 2d ago

Easy Apply

Contract

Depends on Experience

Lead Network Security Engineer

M&T BANK CORPORATION

Buffalo, New York • Today

Full-time

USD 116,400.00 - 194,000.00 per year

Lead Infrastructure Engineer

Moog, Inc.

Buffalo, New York • Today

Full-time

USD 130,000.00 - 170,000.00 per year

Systems Engineer – Active Directory

Infomerica, Inc

Remote or Hybrid in Houston, Texas • 24d ago

Easy Apply

Third Party, Contract

Depends on Experience

IAM AD Engineer

RELQ TECHNOLOGIES LLC

Remote or Dallas, Texas • Today

Full-time

Active Directory Engineer

Oxford Global Resources

Remote • 2d ago

Easy Apply

Contract

Depends on Experience

Azure AD B2C / Microsoft Entra External ID Systems Engineer

On-Demand Group

Remote • 12d ago

Easy Apply

Contract

Depends on Experience

Lead Systems Engineer

Stone Search

Remote • Today

Easy Apply

Full-time

124,000 - 160,000

Lead IAM Engineer (Remote)

Robert Half

Remote or Hartford, Connecticut • Today

Easy Apply

Contract

USD 50.00 - 60.00 per hour

Lead Software Development Engineer

UKG Careers

Remote • Today

Full-time

USD 133,900.00 - 190,750.00 per year

Lead Software Engineer

M&T BANK CORPORATION

Buffalo, New York • 30+d ago

Full-time

USD 147,118.00 - 150,600.00 per year

Lead Data Engineer

Ampacity

Remote or Hybrid in Atlanta, Georgia • 27d ago

Easy Apply

Full-time

120,000 - 130,000

Lead AI Engineer

QUANTUM TECHNOLOGIES LLC

Remote • 2d ago

Easy Apply

Contract, Third Party

80 - 90

Lead Software Engineer - Agentic AI Products

The Search Solutions, LLC

Remote • 11d ago

Easy Apply

Full-time

150,000 - 180,000

Lead Windows System Administrator

BM Associates, Inc.

Remote • 10d ago

Easy Apply

Third Party, Contract

70 - 80

Identity Architect / Domain Lead

CogniSoft Technologies

Remote • 12d ago

Easy Apply

Contract

Depends on Experience

Active Directory Administrator/AD architecture

Spruce Technology Inc.

Remote • 11d ago

Easy Apply

Contract, Third Party

Depends on Experience

I AM Archietct/AD (Remote)

Pacific Consultancy Services

Remote • 3d ago

Easy Apply

Contract, Third Party

Depends on Experience

Active Directory/Entra ID (Remote)

Pacific Consultancy Services

Remote • 3d ago

Easy Apply

Contract, Third Party

Depends on Experience

Senior IT Systems Directory Services and Cloud Identity Specialist

Modine Manufacturing Company

Remote • Today

Full-time

USD 93,000.00 - 163,000.00 per year

Lead Integrations Architect

Cushman & Wakefield

Remote • Today

Full-time

USD 153,000.00 - 180,000.00 per year

IAM Technical Lead

QUANTUM TECHNOLOGIES LLC

Remote • 60+d ago

Easy Apply

Contract

$60 - $70

Systems Engineering Specialist Advisor - Active Directory/Entra ID/Manage Engine

ARK Infotech Spectrum

Remote • Today

Easy Apply

Contract

Depends on Experience

Lead Java Developer

Conduent

Remote or Atlanta, Georgia • Today

Full-time

USD 96,250.00 - 125,000.00 per year

Job Details

Skills

DirectShow
DS
High Availability
Tier 1
Change Control
Mergers and Acquisitions
Dragon NaturallySpeaking
DNS
Microsoft Azure
Microsoft
Active Directory
Hardening
Financial Services
PASS
Delegation
ACL
Identity Management
PIM
Finance
Sarbanes-Oxley
Gramm-Leach-Bliley Act
PCI DSS
System On A Chip
Risk Management
Windows PowerShell
Provisioning
Workflow
Reporting
Change Management
Management
Replication
Data Centers
Authentication
Backup
Recovery
Disaster Recovery
RPO
FOCUS
Information Security
Auditing
Regulatory Compliance
Cloud Computing
Higher Education
Systems Design
Customization
Cyber Security
Critical Thinking
Problem Solving
Conflict Resolution
Communication
Leadership

DirectShow
DS
High Availability
Tier 1
Change Control
Mergers and Acquisitions
Dragon NaturallySpeaking
DNS
Microsoft Azure
Microsoft
Active Directory
Hardening
Financial Services
PASS
Delegation
ACL
Identity Management
PIM
Finance
Sarbanes-Oxley
Gramm-Leach-Bliley Act
PCI DSS
System On A Chip
Risk Management
Windows PowerShell
Provisioning
Workflow
Reporting
Change Management
Management
Replication
Data Centers
Authentication
Backup
Recovery
Disaster Recovery
RPO
FOCUS
Information Security
Auditing
Regulatory Compliance
Cloud Computing
Higher Education
Systems Design
Customization
Cyber Security
Critical Thinking
Problem Solving
Conflict Resolution
Communication
Leadership

Summary

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week
Overview:

Responsible for designing, securing, and operating Microsoft Active Directory Domain Services (AD DS) in regulated, high-availability environments. Acts as knowledge resource for and trains less experienced engineers. Completes day-to-day support activities and special projects.

Primary Responsibilities:

Enterprise Active Directory Architecture
- Proven expertise supporting large-scale, Tier-1 identity infrastructures with strict uptime, latency, and change-control requirements
- Strong experience with:
  - Multi-domain and multi-forest designs aligned to business units, regions, or regulatory boundaries
  - Forest and external trusts supporting M&A, joint ventures, and third-party integrations
  - FSMO role placement optimized for resilience and auditability
- Advanced understanding of Active Directory-integrated DNS, split-brain DNS, and secure name resolution models
Hybrid Identity & Microsoft Entra ID (Azure AD)
- Extensive experience integrating on-prem AD with Microsoft Entra ID in regulated financial environments
- Hands-on implementation of:
  - Entra Connect (Cloud Sync and Traditional)
  - Password Hash Sync, Pass-through Authentication, and Federation
- Strong experience with:
  - Conditional Access aligned to regulatory and risk-based controls
  - Hybrid Join, Entra ID Join, and legacy device coexistence
- Understanding of identity lifecycle controls to support joiners, movers, leavers, and separation-of-duties requirements
Security, Compliance & Risk Controls
- Expert-level knowledge of Active Directory security hardening in financial services, including:
  - Tiered administrative model (Tier 0/1/2)
  - Dedicated admin forests or hardened admin boundaries (where applicable)
  - Privileged Access Workstations (PAWs) / Secure Admin Workstations
- Experience enforcing least privilege, role separation, and dual-control models
- Deep familiarity with threats targeting financial institutions:
  - Credential theft, Kerberoasting, Pass-the-Hash/Ticket
  - Delegation and ACL abuse
- Hands-on experience with:
  - Privileged Identity Management (PIM)
  - Regular access reviews and entitlement recertification
- Strong alignment with Zero Trust and defense-in-depth identity strategies
Regulatory & Audit Readiness
- Demonstrated experience supporting audits and controls for financial regulations and frameworks, such as:
  - SOX, GLBA, PCI DSS, SOC 2
  - Internal risk management and model governance requirements
- Ability to design AD environments that support:
  - Strong logging and traceability
  - Tamper-resistant audit logs
  - Evidence generation for internal and external auditors
Automation & PowerShell
- Advanced PowerShell expertise for:
  - Controlled, auditable administrative changes
  - Automated provisioning/deprovisioning aligned to compliance workflows
  - Identity reporting for risk, security, and audit teams
- Experience building automation that integrates with:
  - Change management processes
  - IAM, ticketing, and security tooling
Operations, Resilience & Recovery
- Deep experience managing:
  - AD replication topology across data centers and regions
  - SYSVOL (DFSR) health and recovery
  - Latency-sensitive authentication dependencies
- Strong understanding of:
  - AD backup, recovery, and authoritative restore procedures
  - Identity disaster recovery scenarios with defined RTO/RPO
- Experience implementing monitoring and alerting with a focus on early risk detection
Leadership & Governance
- Acts as technical authority and escalation point for all directory and identity services
- Defines and enforces:
  - Enterprise identity standards
  - Secure configuration baselines
  - Operational runbooks and procedures
- Partners closely with:
  - Information Security and IAM teams
  - Risk, audit, and compliance stakeholders
  - Infrastructure, cloud, and application teams
- Mentors engineers and reviews designs from a security and risk-first perspective

Education and Experience Required:

Bachelor's degree and a minimum of 5 years' relevant work experience, or in lieu of a degree, a combined minimum of 9 years' higher education and/or work experience

Education and Experience Preferred:

Advanced understanding of the security system development and infrastructure lifecycle and architecture, and systems design
Proven experience with the development and customization of tools utilized in assigned Cybersecurity function
Demonstrated ability to translate architecture into technical requirements
Proficient level of critical thinking and problem solving ability
Excellent communication and interpersonal skills
Experience partnering with leaders to design solutions to business needs.
Proficient persuasive communication skills to gain buy-in of others
Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources
Ability effectively serves in indirect leadership role

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $116,400.00 - $194,000.00 Annual (USD). The successful candidate's particular combination of knowledge, skills, and experience will inform their specific compensation.

Location
Buffalo, New York, United States of America

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 80180520
Position Id: 85c4a26d132e4697330d995629360479
Posted 1 day ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Senior Active Directory Engineer

Buffalo, New York

•

Today

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week Overview: Responsible for designing, securing, and operating Microsoft Active Directory Domain Services (AD DS) in regulated, high-availability environments. Acts as knowledge resource for and trains less experienced engineers. Completes day-to-day support activities and special projects. Primary Responsibilities: Enterprise Active Directory Architecture Proven expertis

Full-time

USD 97,100.00 - 161,800.00 per year

Authentication Engineer (Entra / AD) - 3667093

Buffalo, New York

•

Today

Lighthouse Technology Services is partnering with our client to fill their Authentication Engineer specializing in AD and Entra position! This is a 12 month contract with potential to extend and will be hybrid in Buffalo, NY. This role will be a W2 employee of Lighthouse Technology Services. No C2C or subcontracting arrangements will be considered. What You'll Be Doing: Design and implement strategic authentication frameworks and standards for enterprise Active Directory and Microsoft Entra ID

Full-time

USD 70.00 - 75.00 per hour

Senior Active Directory Engineer (Only Visa Independent Candidate/W2)

Remote

•

2d ago

Job Title:-Senior Active Directory EngineerLocation:-Tarrytown, NY (Remote/Need local who can go onsite when needed)Duration:- Contract Job DescriptionOverview Seeking two Senior Active Directory Engineers to support Directory Services initiatives, including certificate renewal automation through Sectigo Certificate Manager and deploying a dedicated OT Active Directory Test/POC environment. Engineers will execute against architecture documents and standards provided by the internal AD Architectu

Easy Apply

Contract

Depends on Experience

Cloud Engineer

Remote

•

Today

What Cloud Engineering contributes to Cardinal Health Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value. Cloud Engineering analyzes the financial, operational, and technical feasibility of adopting external cloud based IT software, platform and infrastructure services. This job fami

Full-time

USD 96,300.00 - 137,600.00 per year

Job Details

Skills

DirectShow
DS
High Availability
Tier 1
Change Control
Mergers and Acquisitions
Dragon NaturallySpeaking
DNS
Microsoft Azure
Microsoft
Active Directory
Hardening
Financial Services
PASS
Delegation
ACL
Identity Management
PIM
Finance
Sarbanes-Oxley
Gramm-Leach-Bliley Act
PCI DSS
System On A Chip
Risk Management
Windows PowerShell
Provisioning
Workflow
Reporting
Change Management
Management
Replication
Data Centers
Authentication
Backup
Recovery
Disaster Recovery
RPO
FOCUS
Information Security
Auditing
Regulatory Compliance
Cloud Computing
Higher Education
Systems Design
Customization
Cyber Security
Critical Thinking
Problem Solving
Conflict Resolution
Communication
Leadership

DirectShow
DS
High Availability
Tier 1
Change Control
Mergers and Acquisitions
Dragon NaturallySpeaking
DNS
Microsoft Azure
Microsoft
Active Directory
Hardening
Financial Services
PASS
Delegation
ACL
Identity Management
PIM
Finance
Sarbanes-Oxley
Gramm-Leach-Bliley Act
PCI DSS
System On A Chip
Risk Management
Windows PowerShell
Provisioning
Workflow
Reporting
Change Management
Management
Replication
Data Centers
Authentication
Backup
Recovery
Disaster Recovery
RPO
FOCUS
Information Security
Auditing
Regulatory Compliance
Cloud Computing
Higher Education
Systems Design
Customization
Cyber Security
Critical Thinking
Problem Solving
Conflict Resolution
Communication
Leadership

Summary

Enterprise Active Directory Architecture
- Proven expertise supporting large-scale, Tier-1 identity infrastructures with strict uptime, latency, and change-control requirements
- Strong experience with:
  - Multi-domain and multi-forest designs aligned to business units, regions, or regulatory boundaries
  - Forest and external trusts supporting M&A, joint ventures, and third-party integrations
  - FSMO role placement optimized for resilience and auditability
- Advanced understanding of Active Directory-integrated DNS, split-brain DNS, and secure name resolution models
Hybrid Identity & Microsoft Entra ID (Azure AD)
- Extensive experience integrating on-prem AD with Microsoft Entra ID in regulated financial environments
- Hands-on implementation of:
  - Entra Connect (Cloud Sync and Traditional)
  - Password Hash Sync, Pass-through Authentication, and Federation
- Strong experience with:
  - Conditional Access aligned to regulatory and risk-based controls
  - Hybrid Join, Entra ID Join, and legacy device coexistence
- Understanding of identity lifecycle controls to support joiners, movers, leavers, and separation-of-duties requirements
Security, Compliance & Risk Controls
- Expert-level knowledge of Active Directory security hardening in financial services, including:
  - Tiered administrative model (Tier 0/1/2)
  - Dedicated admin forests or hardened admin boundaries (where applicable)
  - Privileged Access Workstations (PAWs) / Secure Admin Workstations
- Experience enforcing least privilege, role separation, and dual-control models
- Deep familiarity with threats targeting financial institutions:
  - Credential theft, Kerberoasting, Pass-the-Hash/Ticket
  - Delegation and ACL abuse
- Hands-on experience with:
  - Privileged Identity Management (PIM)
  - Regular access reviews and entitlement recertification
- Strong alignment with Zero Trust and defense-in-depth identity strategies
Regulatory & Audit Readiness
- Demonstrated experience supporting audits and controls for financial regulations and frameworks, such as:
  - SOX, GLBA, PCI DSS, SOC 2
  - Internal risk management and model governance requirements
- Ability to design AD environments that support:
  - Strong logging and traceability
  - Tamper-resistant audit logs
  - Evidence generation for internal and external auditors
Automation & PowerShell
- Advanced PowerShell expertise for:
  - Controlled, auditable administrative changes
  - Automated provisioning/deprovisioning aligned to compliance workflows
  - Identity reporting for risk, security, and audit teams
- Experience building automation that integrates with:
  - Change management processes
  - IAM, ticketing, and security tooling
Operations, Resilience & Recovery
- Deep experience managing:
  - AD replication topology across data centers and regions
  - SYSVOL (DFSR) health and recovery
  - Latency-sensitive authentication dependencies
- Strong understanding of:
  - AD backup, recovery, and authoritative restore procedures
  - Identity disaster recovery scenarios with defined RTO/RPO
- Experience implementing monitoring and alerting with a focus on early risk detection
Leadership & Governance
- Acts as technical authority and escalation point for all directory and identity services
- Defines and enforces:
  - Enterprise identity standards
  - Secure configuration baselines
  - Operational runbooks and procedures
- Partners closely with:
  - Information Security and IAM teams
  - Risk, audit, and compliance stakeholders
  - Infrastructure, cloud, and application teams
- Mentors engineers and reviews designs from a security and risk-first perspective

Education and Experience Required:

Bachelor's degree and a minimum of 5 years' relevant work experience, or in lieu of a degree, a combined minimum of 9 years' higher education and/or work experience

Education and Experience Preferred:

Advanced understanding of the security system development and infrastructure lifecycle and architecture, and systems design
Proven experience with the development and customization of tools utilized in assigned Cybersecurity function
Demonstrated ability to translate architecture into technical requirements
Proficient level of critical thinking and problem solving ability
Excellent communication and interpersonal skills
Experience partnering with leaders to design solutions to business needs.
Proficient persuasive communication skills to gain buy-in of others
Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources
Ability effectively serves in indirect leadership role

Dice Id: 80180520
Position Id: 85c4a26d132e4697330d995629360479
Posted 1 day ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Senior Active Directory Engineer

Buffalo, New York

•

Today

Full-time

USD 97,100.00 - 161,800.00 per year

Authentication Engineer (Entra / AD) - 3667093

Buffalo, New York

•

Today

Full-time

USD 70.00 - 75.00 per hour

Senior Active Directory Engineer (Only Visa Independent Candidate/W2)

Remote

•

2d ago

Easy Apply

Contract

Depends on Experience

Cloud Engineer

Remote

•

Today

Full-time

USD 96,300.00 - 137,600.00 per year