Engineering Senior Manager, Customer Identity and Access Management (CIAM)

Location: Buffalo, New York, United States of America

Salary: $167,600–$279,400 annual (USD)

Company

M&T Bank is a financial services organization operating a regulated banking technology environment.

What you will do

• Lead engineering, operations, and support teams responsible for the enterprise Customer Identity and Access Management platform.
• Own the CIAM strategy, roadmap, delivery, lifecycle management, availability, resiliency, performance, scalability, and security.
• Direct authentication and identity capabilities including SSO, MFA, adaptive authentication, registration, recovery, identity verification, authorization, session management, device trust, consent, and federation.
• Provide technical governance for OIDC, OAuth 2.0, FAPI, SAML 2.0, JWT, JWS, JWE, and API security frameworks.
• Partner with product, information security, infrastructure, fraud, compliance, and business stakeholders on strategic initiatives.
• Manage budgets, vendors, risk and compliance activities, workforce planning, succession planning, and delivery across multiple technology teams.

Requirements

• At least 13 years of combined higher education and work experience, including at least 4 years in engineering or architecture and 9 years in technology management or program leadership with people management.
• Experience leading multiple teams, complex system enhancements, production problem resolution, and large-scale technology initiatives.
• Knowledge of fraud risk processes and tools, application platforms, the system development lifecycle, and technical, business, and operational project impacts.
• Experience presenting to senior management and leading teams across different geographic locations and time zones.
• Strong problem-solving, project management, team leadership, and stakeholder collaboration skills.
• Work location: Buffalo, New York, United States of America.

Nice to have

• Master’s degree and extensive technology management or large-program leadership experience.
• Enterprise-scale customer identity modernization experience with platforms such as Okta, Ping Identity, ForgeRock, Auth0, Strivacity, or Entra ID External Identities.
• Experience with passkeys, FIDO2, YubiKeys, phishing-resistant authentication, fraud prevention, risk-based authentication, and identity verification.
• Experience in digital banking, financial services, regulated industries, SRE, observability, disaster recovery, Zero Trust, and operational resiliency.
• Experience managing vendors, budgets, strategic technology investments, and executive technology roadmaps.

Culture & Benefits

• Full-time employment within a structured banking and technology organization.
• Responsibility for a highly resilient platform with 24x7 support expectations and minimal downtime.
• Emphasis on engineering standards, operational excellence, continuous improvement, risk controls, and regulatory compliance.
• Commitment to diversity and maintaining internal and external audit and control standards.