Principal Cybersecurity Infrastructure Engineer

M&T Bank•Buffalo, NY

1d•$139,700 - $232,900•Hybrid

About The Position

The Principal Cybersecurity Infrastructure Engineer designs, implements, and optimizes enterprise security architectures, platforms, and frameworks that protect the organization’s users, applications, data, and cloud services. The role leads development and enhancement of Security Service Edge (SSE) capabilities, including Web/Cloud Proxy, Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), and Enterprise Browser. It addresses complex cybersecurity challenges while aligning security outcomes with business objectives, regulatory requirements, and evolving threats. The engineer serves as a knowledge resource and mentor to less experienced engineers and contributes to both day-to-day engineering support and strategic transformation initiatives. The role designs and implements security architectures and data protection strategies across endpoints, cloud environments, SaaS platforms, collaboration tools, email, and AI applications. It advances Zero Trust, cloud security, and AI security capabilities; establishes governance and monitoring; and advises leadership on technology investments, budgets, platform rationalization, and future-state architecture. The position operates with significant autonomy as a trusted technical advisor and recognized subject matter expert across multiple cybersecurity domains. It has no supervisory responsibilities. This position is four days onsite at the Seneca One location in Buffalo, New York, with the flexibility to work from home one day per week.

Requirements

Bachelor’s degree and at least 7 years of relevant work experience, or, in lieu of a degree, a combined minimum of 11 years of higher education and/or work experience.
Advanced understanding of SSE, Secure Web Gateway (SWG), CASB, ZTNA, Enterprise Browser, data protection, and Zero Trust Architecture principles.
Expertise designing enterprise-scale cloud security architectures across hybrid and multi-cloud environments.

Nice To Haves

Expert knowledge of security architecture, infrastructure lifecycle management, vendor best practices, and enterprise systems design.
Ability to translate business, regulatory, and operational requirements into scalable security solutions and technical implementations.
Advanced critical-thinking, risk-analysis, and problem-solving skills.
Excellent communication and interpersonal skills, including the ability to explain complex technical concepts to executive, technical, risk, audit, and business audiences.
Experience partnering with senior leaders to design and implement strategic cybersecurity solutions supporting business objectives.
Experience collaborating with and influencing peers, stakeholders, and executive leadership.
Proficiency in cross-functional collaboration, decision-making, and organizational change management.
Ability to serve effectively in an indirect leadership role while driving enterprise-wide security initiatives.
Ability to analyze large datasets, security telemetry, and operational metrics to identify trends and inform decisions.
Experience securing AI platforms, generative AI applications, and AI-enabled business processes using governance, monitoring, and AI security solutions.
Ability to develop and maintain multi-year technology roadmaps and strategic plans for assigned security platforms, aligned with enterprise architecture, cybersecurity strategy, and business priorities.
Experience designing and implementing controls for regulatory and compliance requirements, including NYS DFS, GLBA, FFIEC guidance, data privacy obligations, and internal risk-management standards.
Industry certifications such as CISSP, CCSP, GIAC, Microsoft Security Certifications, or equivalent.

Responsibilities

Partner with senior engineers and leadership to define enterprise SSE, Zero Trust, and data protection strategies that reduce risk and support business transformation, cloud adoption, hybrid work, and AI enablement.
Lead architecture, engineering, configuration, and deployment of enterprise security platforms, including Web/Cloud Proxy, CASB, DLP, ZTNA, Enterprise Browser, and other secure-access and data-protection controls.
Define testing methodologies, validation frameworks, and security-effectiveness metrics for data-protection technologies.
Lead complex system and technology deployments, coordinating cross-functional teams and providing technical oversight.
Establish tuning standards, operational baselines, and best practices for data-protection policies, cloud access governance, email protection, browser security, and Zero Trust enforcement.
Lead automation initiatives using APIs, orchestration platforms, AI-driven capabilities, and security workflows to improve efficiency, accelerate response, and reduce manual effort.
Design and implement strategies to identify, classify, govern, monitor, and protect sensitive data across endpoints, cloud services, collaboration platforms, email, and SaaS applications.
Architect and enhance ZTNA solutions using identity-, device-, application-, and risk-aware access controls.
Collaborate with Cybersecurity, Technology, Legal, Risk, Compliance, Data Governance, and business stakeholders to integrate security controls into business processes and transformation initiatives.
Continuously improve security platforms and engineering by evaluating emerging technologies, threat intelligence, industry trends, and regulatory requirements.
Maintain strategic vendor relationships, overseeing issue resolution, product roadmaps, and operational optimization.
Advise leadership on security technology investments, budget planning, platform rationalization, and future-state architecture.
Lead adoption and governance of AI security capabilities, including visibility, risk management, policy enforcement, and secure integration of AI applications and services.
Understand and follow company risk and regulatory standards, policies, and controls; design, maintain, and enhance internal controls; and escalate risk-related issues as needed.
Promote an environment that supports belonging and reflects the M&T Bank brand.
Maintain internal control standards, including timely implementation of internal and external audit findings and applicable issues raised by external regulators.
Complete other related duties as assigned.
Design and implement security architectures that secure access to applications, internet resources, and organizational data regardless of user location.
Architect and manage data classification, labeling, information protection, insider risk management, data lifecycle management, compliance, and governance capabilities.
Develop and implement Zero Trust strategies based on continuous verification, least privilege, segmentation, identity-based security, device trust, and risk-adaptive access.
Design security controls, governance, monitoring, and risk-management practices for enterprise AI platforms and services.
Design and implement security controls and architectures for cloud infrastructure, SaaS applications, cloud workloads, and enterprise data.
Exercise judgment in selecting methods, technologies, architectural patterns, and implementation approaches to achieve strategic security objectives.
Serve as a trusted technical advisor and subject matter expert across SSE, data protection, Zero Trust Architecture, cloud security, and AI security.