Principal Cybersecurity Infrastructure Engineer

Location: Buffalo, New York, United States; four days onsite at Seneca One Buffalo and one day working from home per week.

Salary: $139,700–$232,900 annual USD.

Company

M&T Bank is a banking organization focused on enterprise financial services and regulated technology environments.

What you will do

• Design, implement, and optimize enterprise Security Service Edge, Zero Trust, cloud security, and data protection architectures.
• Lead engineering and deployment of Web/Cloud Proxy, CASB, DLP, ZTNA, Enterprise Browser, and related security platforms.
• Develop testing methodologies, validation frameworks, operational baselines, and security effectiveness metrics.
• Design data protection capabilities covering classification, labeling, governance, monitoring, insider risk, and data lifecycle management.
• Automate security workflows using APIs, orchestration platforms, AI-driven capabilities, and integrations.
• Advise leadership on security investments, technology roadmaps, vendor relationships, regulatory controls, and future-state architecture.

Requirements

• Bachelor's degree and at least 7 years of relevant experience, or a combined minimum of 11 years of higher education and/or work experience without a degree.
• Advanced knowledge of SSE, SWG, CASB, ZTNA, Enterprise Browser, DLP, and Zero Trust Architecture.
• Expertise designing enterprise-scale cloud security architectures across hybrid and multi-cloud environments.
• Expert knowledge of security architecture, infrastructure lifecycle management, vendor practices, and enterprise systems design.
• Ability to translate business, regulatory, and operational requirements into scalable security solutions.
• Strong critical thinking, risk analysis, communication, cross-functional collaboration, and indirect leadership skills.

Nice to have

• Experience securing AI platforms, generative AI applications, and AI-enabled business processes.
• Experience with large datasets, security telemetry, and operational metrics.
• Knowledge of NYS DFS, GLBA, FFIEC guidance, data privacy, and internal risk management standards.
• CISSP, CCSP, GIAC, Microsoft Security Certification, or equivalent certification.

Culture & Benefits

• Hybrid schedule with four onsite days and one work-from-home day each week.
• Work includes collaboration with Cybersecurity, Technology, Legal, Risk, Compliance, Data Governance, and business units.
• Role operates with significant autonomy as a trusted technical advisor.
• Responsibilities include maintaining internal controls and addressing audit and regulatory findings.