Senior Software Engineer - CIAM

M&T Bank•Buffalo, NY

About The Position

The Senior Customer Identity & Access Management (CIAM) Software Engineer designs, builds, and supports customer identity, authentication, and access solutions across retail, business, commercial, wealth, and institutional digital experiences. Working independently within the Software Development Life Cycle (SDLC), this role delivers secure, resilient code, contributes to technical requirements gathering, and helps ensure customer access is secure, seamless, and compliant. The engineer collaborates with lead and principal engineers, product owners, cybersecurity, fraud, architecture, and application teams to deliver authentication experiences, customer identity verification capabilities, MFA and step-up flows, password recovery services, customer profile management, and authorization integrations. The role also supports production operations, participates in code reviews and technical design discussions, and shares knowledge with peers and less experienced engineers. The position has no supervisory responsibilities. It provides informal knowledge sharing and peer support through code reviews and collaboration. The role is based in Buffalo, New York. The listed annual pay range is $97,100.00–$161,800.00 USD.

Requirements

Associate's degree and at least 5 years of systems analysis and/or application development experience, or Bachelor's degree and at least 3 years of such experience.
In lieu of a degree, a combined minimum of 7 years of education and/or relevant work experience, including at least 3 years of systems analysis and/or application development experience.
Advanced proficiency in at least one relevant programming language, preferably C#/.NET.
Hands-on experience with JavaScript for web or API development.
Working knowledge of software design patterns, Web APIs, microservices, and distributed systems concepts.
Experience implementing or supporting authentication and authorization using OAuth 2.0, OpenID Connect (OIDC), SAML, JWT/token-based security, and SSO.
Hands-on experience with source control platforms such as Git, CI/CD pipelines, and automated build and deployment processes.
Experience working in Agile delivery teams using collaboration and work-tracking tools.

Nice To Haves

Advanced analytical skills specific to application development.
Ability to work autonomously and multitask on complex projects.
Strong organizational and time-management skills.
Proficient verbal and written communication skills.
Experience with Angular or another modern front-end framework.
Experience with customer identity (CIAM) platforms such as Strivacity, PingFederate, or similar identity providers.
Familiarity with MFA, step-up and adaptive/risk-based authentication, passkeys, and fraud-aware authentication patterns.
Experience with Microsoft Azure and cloud-native technologies, such as Azure App Service, Azure Kubernetes Service (AKS), Azure Functions, managed identities, and Entra ID.
Experience with DevSecOps and observability tools such as Dynatrace, Kibana, SonarQube, Aqua, and Mend.
Experience developing software in financial services or another regulated industry.

Responsibilities

Design, develop, test, and deploy CIAM applications and integrations within the approved SDLC, meeting business needs while minimizing risk through clean, secure, resilient code.
Write organized, efficient, and secure source code, primarily in C#/.NET and JavaScript, applying appropriate data structures, algorithms, and design patterns; work is verified by a lead software engineer.
Build and enhance customer authentication and authorization capabilities, including login, MFA and step-up flows, password recovery, customer profile management, and SSO integrations, using OAuth 2.0, OIDC, SAML, and JWT/token-based security models.
Develop and maintain Web APIs and services integrating customer identity platforms with digital banking channels and partner applications.
Review pull requests, provide constructive feedback on code quality and improvements, and execute approved change management requests.
Use source code management tools to manage and deploy code and applications, comply with SDLC policies, and support merge conflict resolution.
Write and maintain automated unit and integration tests and contribute to CI/CD pipelines, code-quality analysis, and security scanning.
Analyze and critique technical and business requirements for completeness, accuracy, and feasibility, and estimate development work.
Support CIAM application production operations, including incident triage, troubleshooting, and root cause analysis using monitoring and observability tools.
Collaborate with other teams, documenting and communicating technical implementation details and dependent requirements clearly and concisely.
Contribute to architecture and design discussions with engineers, architects, and stakeholders; raise risks and recommend improvements.
Share knowledge with peers and less experienced engineers through code reviews, pairing, and documentation.
Follow company risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite, and escalate risk-related issues to management.
Promote a culture of belonging that reflects the M&T Bank brand.
Maintain internal control standards, including timely implementation of internal and external audit points and applicable issues raised by external regulators.
Complete other related duties as assigned.