Lead Cloud Network Engineer

M&T Bank•Buffalo, NY

1d•$116,400 - $194,000

About The Position

The Lead Cloud Network Engineer designs, implements, automates, supports, and optimizes secure, scalable, and resilient networking solutions across public-cloud and hybrid environments. The role uses platforms including Microsoft Azure, Amazon Web Services (AWS), and multi-cloud networking technologies such as Aviatrix to meet organizational objectives. It works with technology management, engineers, Scrum Masters, support teams, internal clients, and stakeholders to develop solutions that meet business, connectivity, security, and infrastructure requirements. The position also contributes to architecture and infrastructure reviews, implementation planning, testing, migrations, upgrades, operational support, capacity planning, disaster recovery, compliance, and operational readiness. It troubleshoots network incidents and performance issues, documents designs and operating procedures, coordinates vendors, monitors network and security conditions, integrates cloud networking with enterprise systems, and mentors less experienced technical staff. The engineer promotes industry practices and security frameworks, follows company risk and regulatory controls, and supports M&T Bank's internal control standards and belonging-focused environment.

Requirements

Combined minimum of 8 years of higher education and/or work experience in systems design, management, and/or architecture.
At least 3 years of professional experience supporting, implementing, and optimizing cloud or hybrid networking environments in a complex enterprise environment.
Experience designing, deploying, and managing public-cloud networking services in Microsoft Azure, AWS, or similar platforms.
Experience implementing and maintaining hybrid networking solutions using VPNs, dedicated private connectivity, and cloud-native networking technologies.
Hands-on experience with Infrastructure-as-Code technologies, including Terraform.
Strong understanding of TCP/IP networking, routing, DNS, VPN technologies, NAT, load balancing, and network security principles.

Nice To Haves

Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Network Engineering, or a related field.
Microsoft Certified: Azure Network Engineer Associate, AWS Certified Advanced Networking – Specialty, or similar cloud networking certification.
Experience with multi-cloud networking platforms such as Aviatrix.
Experience with cloud-native automation technologies such as Azure Resource Manager (ARM), AWS CloudFormation, and/or Ansible.
Advanced technical skills in cloud networking, hybrid networking, and infrastructure automation.
Advanced analytical, troubleshooting, and problem-solving skills.
Strong expertise in cloud-native networking technologies, including virtual networks, cloud firewalls, VPN gateways, dedicated connectivity solutions, and load balancing services.
Ability to analyze packet captures and troubleshoot complex connectivity and performance issues using tools such as Wireshark.
Ability to translate complex business and technical requirements into secure, scalable, and supportable networking solutions.
Advanced knowledge of cloud security controls, governance models, and regulatory compliance frameworks.
Ability to solicit, gather, document, and analyze technical requirements from diverse stakeholders.
Strong understanding of interactions between cloud networking technologies, enterprise infrastructure, security services, and application platforms.
Excellent written and verbal communication skills.
Effective influencing and collaboration skills.
Process-oriented approach and strong organizational skills.
Logical thinking and ability to work independently and collaboratively in a team environment.
Adaptability and ability to learn technologies in a rapidly evolving cloud environment.

Responsibilities

Work with Technology management, senior engineers, Scrum Masters, and support teams to design, implement, and manage cloud networking solutions for current and future business requirements.
Collaborate with internal clients and stakeholders to gather networking, connectivity, security, and infrastructure requirements and translate them into cloud-based solutions.
Design, deploy, and optimize cloud networking architectures, including virtual networks, subnets, load balancers, DNS services, VPN gateways, and hybrid connectivity.
Configure and manage cloud-native network security controls, including Network Security Groups (NSGs), cloud firewalls, and DDoS protection services.
Implement, maintain, and optimize multi-cloud networking solutions, including use of Aviatrix.
Automate cloud network provisioning, configuration, and lifecycle management using Infrastructure-as-Code technologies, including Terraform.
Participate in infrastructure reviews, architecture design, implementation planning, testing, migrations, upgrades, and operational support.
Troubleshoot network incidents and performance issues using monitoring platforms, logs, packet captures, and diagnostic tools such as Wireshark.
Develop and maintain network diagrams, configuration standards, operational procedures, architectural designs, and support documentation.
Coordinate vendor interactions and support engagements to resolve technical issues and support project initiatives.
Monitor network traffic, system performance, and security alerts to identify and mitigate risks, threats, and service disruptions.
Integrate cloud networking solutions with enterprise infrastructure, security platforms, and application environments.
Participate in capacity planning, disaster recovery testing, compliance initiatives, and operational readiness activities.
Mentor and coach less experienced engineers and technical staff; review designs, documentation, and proposed changes for adherence to standards and best practices.
Follow and promote cloud networking practices, standards, and security frameworks, including NIST, CIS Benchmarks, and FFIEC guidance.
Maintain knowledge of cloud-provider networking services, vendor technologies, and evolving cloud networking trends.
Adhere to company risk and regulatory standards, policies, controls, and risk appetite; identify risk-related issues requiring escalation.
Promote an environment that supports belonging and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit findings and remediation activities.
Complete other related duties as assigned.