Lead Cloud Network Engineer

M&T Bank•Buffalo, NY

About The Position

The Lead Cloud Network Engineer designs, implements, automates, supports, and optimizes secure, scalable, and resilient networking solutions across public cloud and hybrid environments. The role uses platforms such as Microsoft Azure and Amazon Web Services (AWS), along with multi-cloud networking technologies such as Aviatrix, to meet organizational objectives. The engineer works with technology management, senior engineers, Scrum Masters, support teams, internal clients, and other stakeholders to translate business, connectivity, security, and infrastructure requirements into cloud networking solutions. The role includes designing cloud network architectures, implementing security controls and infrastructure automation, troubleshooting incidents, maintaining technical documentation, supporting operational and compliance activities, and mentoring less experienced engineers. The position also promotes cloud networking and security best practices, supports risk and regulatory standards, escalates risk-related issues, maintains internal control standards, and helps foster an environment that supports belonging and reflects the M&T Bank brand. Other related duties may be assigned.

Requirements

Combined minimum of 8 years of higher education and/or work experience in systems design, management, and/or architecture.
At least 3 years of professional experience supporting, implementing, and optimizing cloud networking or hybrid networking environments in a complex enterprise environment.
Experience designing, deploying, and managing public cloud networking services in Microsoft Azure, AWS, or similar cloud platforms.
Experience implementing and maintaining hybrid networking solutions using VPNs, dedicated private connectivity, and cloud-native networking technologies.
Hands-on experience with Infrastructure-as-Code technologies, including Terraform.
Strong understanding of TCP/IP networking, routing, DNS, VPN technologies, NAT, load balancing, and network security principles.

Nice To Haves

Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Network Engineering, or a related field.
Microsoft Certified: Azure Network Engineer Associate, AWS Certified Advanced Networking – Specialty, or similar cloud networking certifications.
Experience with multi-cloud networking platforms such as Aviatrix.
Experience with cloud-native automation technologies, including Azure Resource Manager (ARM), AWS CloudFormation, and/or Ansible.
Advanced technical skills supporting cloud networking, hybrid networking, and infrastructure automation.
Advanced analytical, troubleshooting, and problem-solving skills.
Strong expertise in cloud-native networking technologies, including virtual networks, cloud firewalls, VPN gateways, dedicated connectivity solutions, and load balancing services.
Ability to analyze network packet captures and troubleshoot complex connectivity and performance issues using tools such as Wireshark.
Ability to translate complex business and technical requirements into secure, scalable, and supportable networking solutions.
Advanced knowledge of cloud security controls, governance models, and regulatory compliance frameworks.
Ability to solicit, gather, document, and analyze technical requirements from diverse stakeholders.
Strong understanding of interactions between cloud networking technologies and enterprise infrastructure, security services, and application platforms.
Excellent written and verbal communication skills.
Effective influencing and collaboration skills.
Process-oriented with strong organizational skills.
Logical thinker with the ability to work independently and collaboratively in a team environment.
Adaptable and capable of learning new technologies in a rapidly evolving cloud environment.

Responsibilities

Work with technology management, senior engineers, Scrum Masters, and support teams to design, implement, and manage cloud networking solutions that meet current and future business requirements.
Collaborate with internal clients and stakeholders to understand networking, connectivity, security, and infrastructure requirements and translate them into cloud-based solutions.
Design, deploy, and optimize cloud networking architectures, including virtual networks, subnets, load balancers, DNS services, VPN gateways, and hybrid connectivity solutions.
Configure and manage cloud-native network security controls, including Network Security Groups (NSGs), cloud firewalls, and DDoS protection services.
Implement, maintain, and optimize multi-cloud networking solutions using platforms such as Aviatrix.
Automate cloud network provisioning, configuration, and lifecycle management using Infrastructure-as-Code (IaC) technologies, including Terraform.
Participate in infrastructure reviews, architecture design, implementation planning, testing, migrations, upgrades, and operational support activities.
Troubleshoot network-related incidents and performance issues using monitoring platforms, logs, packet captures, and diagnostic tools such as Wireshark.
Develop and maintain technical documentation, including network diagrams, configuration standards, operational procedures, architectural designs, and support documentation.
Coordinate vendor interactions and support engagements to resolve technical issues and support project initiatives.
Monitor network traffic, system performance, and security alerts to identify and mitigate risks, threats, and service disruptions.
Integrate cloud networking solutions with enterprise infrastructure, security platforms, and application environments.
Participate in capacity planning, disaster recovery testing, compliance initiatives, and operational readiness activities.
Mentor and coach less experienced engineers and technical staff.
Review designs, documentation, and proposed changes for adherence to standards and best practices.
Follow and promote industry best practices, cloud networking standards, and security frameworks, including NIST, CIS Benchmarks, and FFIEC guidance.
Maintain knowledge of cloud provider networking services, vendor technologies, and evolving cloud networking trends.
Adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite, and escalate risk-related issues to management.
Promote an environment that supports belonging and reflects the M&T Bank brand.
Maintain M&T internal control standards, including timely implementation of internal and external audit findings and remediation activities.
Complete other related duties as assigned.