Senior Software Engineer - CIAM
About The Position
The Senior Customer Identity & Access Management (CIAM) Software Engineer designs, builds, and supports customer identity, authentication, and access solutions across retail, business, commercial, wealth, and institutional digital experiences. Working independently within the approved Software Development Life Cycle (SDLC), the engineer delivers secure, resilient code, contributes to technical requirements gathering, and helps ensure customer access is secure, seamless, and compliant. The role collaborates with lead and principal engineers, product owners, cybersecurity, fraud, architecture, and application teams to deliver authentication experiences, customer identity verification capabilities, MFA and step-up flows, password recovery services, customer profile management, and authorization integrations. It also supports CIAM production operations and contributes to application architecture and design discussions. This position has no supervisory responsibilities, though it provides informal knowledge sharing and peer support through code reviews and collaboration. The role is based in Buffalo, New York. The annual pay range is $97,100.00–$161,800.00 USD.
Requirements
- Associate's degree and at least 5 years of systems analysis and/or application development experience; or bachelor's degree and at least 3 years of such experience; or, in lieu of a degree, at least 7 years of combined education and/or relevant work experience, including at least 3 years of systems analysis and/or application development experience.
- Advanced proficiency in at least one relevant programming language, preferably C#/.NET.
- Hands-on JavaScript experience for web or API development.
- Working knowledge of software design patterns, Web APIs, microservices, and distributed systems concepts.
- Experience implementing or supporting authentication and authorization using OAuth 2.0, OpenID Connect (OIDC), SAML, JWT/token-based security, and SSO.
- Hands-on experience with source control platforms such as Git, CI/CD pipelines, and automated build and deployment processes.
- Experience working in Agile delivery teams using collaboration and work-tracking tools.
Nice To Haves
- Advanced analytical skills specific to application development.
- Ability to work autonomously and multitask on complex projects.
- Strong organizational and time-management skills.
- Proficient verbal and written communication skills.
- Experience with Angular or another modern front-end framework.
- Experience with customer identity (CIAM) platforms such as Strivacity, PingFederate, or similar identity providers.
- Familiarity with MFA, step-up and adaptive/risk-based authentication, passkeys, and fraud-aware authentication patterns.
- Experience with Microsoft Azure and cloud-native technologies, such as Azure App Service, Azure Kubernetes Service (AKS), Azure Functions, managed identities, and Entra ID.
- Experience with DevSecOps and observability tools such as Dynatrace, Kibana, SonarQube, Aqua, and Mend.
- Experience developing software in financial services or another regulated industry.
Responsibilities
- Independently design, develop, test, and deploy CIAM applications and integrations within the approved SDLC, solving business needs while minimizing risk through clean, secure, and resilient code.
- Write organized, efficient, and secure source code at an advanced level, primarily in C#/.NET and JavaScript, applying appropriate data structures, algorithms, and design patterns; work is verified by a lead software engineer.
- Build and enhance customer authentication and authorization capabilities, including login, MFA and step-up flows, password recovery, customer profile management, and SSO integrations.
- Develop and maintain Web APIs and services integrating customer identity platforms with digital banking channels and partner applications.
- Review pull requests, provide constructive feedback on code quality and improvements, and execute change management for approved requests.
- Use source code management tools to manage and deploy code and applications, comply with SDLC policies, and support merge conflict resolution.
- Write and maintain automated unit and integration tests and contribute to CI/CD pipelines, code-quality analysis, and security scanning.
- Analyze and critique technical and business requirements for completeness, accuracy, and feasibility, and estimate development work.
- Support production operations for CIAM applications, including incident triage, troubleshooting, and root cause analysis using monitoring and observability tools.
- Collaborate with other teams, document technical implementation details, and communicate dependent requirements clearly and concisely.
- Contribute to architecture and design discussions with engineers, architects, and business or technical stakeholders; raise risks and recommend improvements.
- Share knowledge with peers and less experienced engineers through code reviews, pairing, and documentation.
- Follow company risk and regulatory standards, policies, and controls; identify risk-related issues requiring escalation.
- Promote a culture of belonging that reflects the M&T Bank brand.
- Maintain internal control standards, including timely implementation of internal and external audit points and applicable issues raised by external regulators.
- Complete other related duties as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
Associate degree
