CareerPlanGet AI match score →

Lead Active Directory Engineer

Buffalo, NY💼 Full-time💰 $116,400–$116,400🗓 2026-04-30 → 2026-07-30

Core

Designing, securing, and operating Microsoft Active Directory Domain Services in regulated, high-availability financial environments.

Role type

Senior IC Active Directory Engineer

Builds

Tier-1 identity infrastructures supporting M&A, joint ventures, and third-party integrations

Domain

Financial services / Identity Infrastructure

Deliverable

production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work

Required skills

Multi-domain/multi-forest AD design, Entra Connect implementation, AD security hardening, PowerShell automation, AD replication topology management, audit log management

Preferred skills

Systems design, tool customization, translating architecture to technical requirements, critical thinking, data analysis

Technologies

Microsoft Active Directory, Microsoft Entra ID, PowerShell, DFSR, PIM

Responsibilities

Design enterprise AD architecture aligned to business units and regulatory boundaries; Implement hybrid identity solutions with Entra ID; Enforce security hardening and least privilege models; Automate administrative changes and provisioning; Manage AD replication and disaster recovery procedures; Mentor engineers and define operational standards

Seniority

Senior, hands-on IC

Sourced via workday · Listed on CareerPlan, which tracks 70,000+ jobs from 20+ sources.
Apply on Workday ↗