Senior Cybersecurity Encryption Engineer
This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week
Overview:
We are seeking a highly skilled Senior Encryption Engineer, where you'll play a crucial role in ensuring the security and integrity of our infrastructure. This pivotal role involves supporting the design and implementation of our Public Key Infrastructure (PKI) and encryption solutions. The ideal candidate will exhibit expertise in cryptographic protocols, possess a deep understanding of PKI, and demonstrate the ability to create and maintain secure cryptographic environments.
Primary Responsibilities:
Design and implement encryption and PKI solutions to secure digital transactions, communications, and data within the bank
Manage and maintain the bank's encryption infrastructure to ensure compliance with industry standards
Provide expertise and support for cryptographic key management, including key generation, distribution, and revocation
Stay abreast of industry trends and emerging technologies related to PKI, encryption, and cybersecurity to enhance the bank's security posture
Oversee the day-to-day operations of PKI services, including certificate issuance, renewal, revocation, and key management
Drive automation initiatives to streamline PKI processes and enhance service delivery efficiency
Evaluate emerging technologies and tools, making recommendations for their integration and optimization of our service offering
Work closely with Technology management, senior Engineers, and support teams on a regular basis to implement and manage the design, development, and execution of technical solutions that meet or exceed current and future needs of the organization.
Responsibilities may include infrastructure review, implementation, and design, creation of support and architectural documentation, standards, policies, analysis, and testing.
Regularly and independently interact with business partners of varying associate and management levels to ensure clarity of the problem/opportunity and elicit business requirements.
Coordinate vendor interactions and/or vendor resources as needed.
Mentor and coach less experienced engineers, technicians, and integrators. Review documentation, proposals, and changes proposed by less experienced staff.
Seek to expand knowledge and understanding of Financial Services trends, practices, and technologies on a continuous basis.
Follow and promote use of industry best practices, standards and procedures.
Maintain a strong aptitude and working knowledge of Bank applications, systems, development environments. Maintain a detailed understanding of vendor technologies and services used by the Bank.
Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management.
Promote an environment that supports diversity and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
Complete other related duties as assigned.
Scope of Responsibilities:
- Partners primarily with individual contributors and leaders within Cybersecurity and Technology, and occasionally senior leaders within Cybersecurity.
- Determines and develops approach to solutions. Work is accomplished with periodic check-ins for alignment and limited direction. Work is evaluated upon completion to ensure objectives have been met.
- Proficient ability to use multiple Cybersecurity tools, specific to function.
Manager Responsibilities:
No supervisory responsibilities.
Education and Exp erience Required:
- Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience
- Experience with PKI technologies including digital certificates, Certificate Authorities (CAs), Post Quantum Cryptography (PQC), and Hardware Security Modules (HSMs)
- Strong understanding of cryptographic protocols, algorithms, and key management practices
- In-depth knowledge of encryption technologies, including design, implementation, and administration
- Experience with scripting and programming languages (e.g., Python, PowerShell) for automating security tasks utilizing APIs and developing use cases
- Strong understanding of Encryption Standards, Procedures, and industry best practices
Education and Experience Preferred:
- Bachelor’s degree in Computer Science or Computer Engineering
- Minimum 6 years’ professional experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications
- Strong knowledge of regulatory compliance standards related to encryption and data protection controls within the banking sector
- Working knowledge and familiarity with PKI and encryption providers such as Keyfactor, Thales, DigiCert, etc.
- Professional certifications in information security and encryption technologies, such as Certified Information Systems Security Professional (CISSP), Certified Encryption Specialist (CES), or Certified Information Security Manager (CISM), are highly desirable
- Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches
- Advanced problem solving skills
- Advanced knowledge and advanced expertise in industry and/or vendor technologies
- Able to solicit, gather, document, and analyze system specification and requirements
- Ability to work independently and collaboratively with others in team environment
- Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse range of stakeholders and group size
- Understanding of how supported technologies interact with other systems and services
- Excellent written and verbal communication skills
- Effective influencing skills
- Able to learn quickly in a rapid pace environment