Identity & Access Management Specialist (Active Directory Microsoft Entra ID CyberArk) - Hybrid

M&T Bank • Buffalo, NY

3d • Hybrid

About The Position

Join a team that plays a critical role in keeping the organization running. The Identity Management team is responsible for managing user access throughout the employee lifecycle, ensuring team members have the right access to the right systems at the right time. From employee onboarding and role changes to departures, this team helps safeguard the organization's systems while enabling employees to do their jobs effectively. As an Identity & Access Management Specialist, you will manage and support access provisioning, deprovisioning, recertification, and remediation activities across a complex enterprise environment. You'll work extensively with technologies such as Active Directory, Microsoft Entra ID, CyberArk, and other identity management tools while handling a high volume of requests and supporting key security initiatives. This role is ideal for a detail-oriented, self-motivated professional who thrives in a fast-paced environment, enjoys solving complex access challenges, and values being part of a highly collaborative team.

Requirements

• Experience in Identity & Access Management (IAM), identity governance, access administration, or related cybersecurity disciplines.
• Knowledge of Active Directory, Microsoft Entra ID, CyberArk, or similar identity management platforms.
• Experience supporting Privileged Access Management (PAM) programs and controls.
• Familiarity with identity management tools, enterprise file systems, Exchange administration, or related technologies.
• Experience working within ticketing and workflow management systems such as Jira.
• Strong organizational skills with the ability to manage multiple priorities simultaneously.
• A detail-oriented mindset and commitment to accuracy.
• Strong problem-solving and analytical thinking abilities.
• Excellent verbal and written communication skills.
• A collaborative, team-first approach and willingness to support colleagues.
• The ability to quickly learn new technologies, processes, and business requirements.
• Associates degree, or equivalent work experience.
• 4+ years’ relevant work experience.
• Basic understanding of identity and access management.

Nice To Haves

• Bachelor's degree in Information Technology, Cybersecurity, Business, or a related field.
• Experience in Identity & Access Management, information security, systems administration, or a related technology field.
• Experience supporting user access provisioning, deprovisioning, and access governance activities.
• Experience with Active Directory, Microsoft Entra ID, CyberArk, or similar IAM technologies.
• Experience with Privileged Access Management (PAM).
• Experience within a large enterprise technology or cybersecurity environment.
• Knowledge of identity governance, access certifications, and compliance requirements.

Responsibilities

• Manage user access throughout the employee lifecycle, including onboarding, job transfers, and offboarding activities.
• Provision, modify, and remove access across a wide range of enterprise applications, platforms, and systems while ensuring compliance with security policies and access governance standards.
• Administer and support identity management technologies including Active Directory, Microsoft Entra ID, CyberArk, and related IAM solutions.
• Perform access reviews, certifications, and audits to ensure appropriate user permissions are maintained.
• Investigate, troubleshoot, and resolve complex identity and access issues, serving as an escalation point for challenging requests.
• Conduct root cause analysis and implement corrective actions to improve security, efficiency, and user experience.
• Partner with technology teams, cybersecurity teams, and business stakeholders to gather requirements, resolve issues, and support access-related initiatives.
• Support Privileged Access Management (PAM) processes and controls.
• Contribute to both day-to-day operational work and strategic projects focused on improving identity and access management capabilities.
• Utilize Jira and queue-based workflows to prioritize, track, and complete requests efficiently.
• Develop and maintain standard operating procedures and process documentation.
• Train and mentor newer team members and share knowledge across the team.
• Participate in an on-call rotation to support critical production access issues outside of normal business hours.

Benefits

• Flexibility to choose their preferred remote workday.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree