We are seeking a highly skilled Senior Encryption Engineer, where you'll play a crucial role in ensuring the security and integrity of our infrastructure. This pivotal role involves supporting the design and implementation of our Public Key Infrastructure (PKI) and encryption solutions. The ideal candidate will exhibit expertise in cryptographic protocols, possess a deep understanding of PKI, and demonstrate the ability to create and maintain secure cryptographic environments.
Design and implement encryption and PKI solutions to secure digital transactions, communications, and data within the bank
Manage and maintain the bank's encryption infrastructure to ensure compliance with industry standards
Provide expertise and support for cryptographic key management, including key generation, distribution, and revocation
Stay abreast of industry trends and emerging technologies related to PKI, encryption, and cybersecurity to enhance the bank's security posture
Oversee the day-to-day operations of PKI services, including certificate issuance, renewal, revocation, and key management
Drive automation initiatives to streamline PKI processes and enhance service delivery efficiency
Evaluate emerging technologies and tools, making recommendations for their integration and optimization of our service offering
Work closely with Technology management, senior Engineers, and support teams on a regular basis to implement and manage the design, development, and execution of technical solutions that meet or exceed current and future needs of the organization.
Responsibilities may include infrastructure review, implementation, and design, creation of support and architectural documentation, standards, policies, analysis, and testing.
Regularly and independently interact with business partners of varying associate and management levels to ensure clarity of the problem/opportunity and elicit business requirements.
Coordinate vendor interactions and/or vendor resources as needed.
Mentor and coach less experienced engineers, technicians, and integrators. Review documentation, proposals, and changes proposed by less experienced staff.
Seek to expand knowledge and understanding of Financial Services trends, practices, and technologies on a continuous basis.
Follow and promote use of industry best practices, standards and procedures.
Maintain a strong aptitude and working knowledge of Bank applications, systems, development environments. Maintain a detailed understanding of vendor technologies and services used by the Bank.
Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management.
Promote an environment that supports diversity and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
Complete other related duties as assigned.
No supervisory responsibilities.
Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience
Experience with PKI technologies including digital certificates, Certificate Authorities (CAs), Post Quantum Cryptography (PQC), and Hardware Security Modules (HSMs)
Strong understanding of cryptographic protocols, algorithms, and key management practices
In-depth knowledge of encryption technologies, including design, implementation, and administration
Experience with scripting and programming languages (e.g., Python, PowerShell) for automating security tasks utilizing APIs and developing use cases
Strong understanding of Encryption Standards, Procedures, and industry best practices
Bachelor’s degree in Computer Science or Computer Engineering
Minimum 6 years’ professional experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications
Strong knowledge of regulatory compliance standards related to encryption and data protection controls within the banking sector
Working knowledge and familiarity with PKI and encryption providers such as Keyfactor, Thales, DigiCert, etc.
Professional certifications in information security and encryption technologies, such as Certified Information Systems Security Professional (CISSP), Certified Encryption Specialist (CES), or Certified Information Security Manager (CISM), are highly desirable
Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches
Advanced problem solving skills
Advanced knowledge and advanced expertise in industry and/or vendor technologies
Able to solicit, gather, document, and analyze system specification and requirements
Ability to work independently and collaboratively with others in team environment
Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse range of stakeholders and group size
Understanding of how supported technologies interact with other systems and services
Excellent written and verbal communication skills
Effective influencing skills
Able to learn quickly in a rapid pace environment
M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $106,700.00 - $177,900.00 (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.
