Principal Endpoint Engineer

M&T Bank; Buffalo (NY); On-site; USD 140,000 - 233,000; Full time

Benefits offered by this job

401(k) match at 5%

Health, welfare, and retirement

Work-life balance

PTO and holidays

Volunteer hours

Job summary

M&T Bank in Buffalo, NY seeks a Principle Desktop Engineering Architect to design, implement, and optimize Windows and macOS endpoint solutions with high autonomy. You will lead enterprise desktop initiatives and influence strategy across platforms, security controls, user experience, and operational support teams.

Responsibilities include end-to-end delivery, translating requirements into scalable solutions, mentoring engineers, and partnering with security, infrastructure, and business teams.

Qualifications

• Combined minimum of 10 years’ higher education and/or experience in systems design, management, and/or architecture.
• Windows enterprise desktop architecture, OS deployment and lifecycle management, Group Policy, patching, and endpoint security controls.
• MacOS platform engineering, Apple device management, configuration profiles, and deployment.
• Deep technical expertise across Windows and macOS desktop platforms.
• Advanced problem-solving, stakeholder communication, and cross-functional leadership.

Responsibilities

• Design and develop advanced endpoint engineering solutions across Windows and macOS platforms.
• Define architecture, standards, baselines, and engineering patterns for enterprise desktops.
• Evaluate new technologies to improve endpoint security, manageability, and performance.
• Lead platform strategy for Windows and macOS desktop engineering and software delivery.
• Ensure solutions meet performance, security, compliance, resiliency, and support standards.
• Lead end-to-end delivery of large-scale desktop initiatives and drive rollout activities.
• Translate requirements into scalable endpoint solutions and oversee testing and deployment.
• Support policy enforcement, patching, application deployment, and device compliance.
• Partner with engineering, infrastructure, security, and business teams; mentor engineers.
• Maintain documentation and technical standards; drive governance and audit remediation.

Skills

Enterprise desktop architecture

Windows OS deployment

Group Policy

macOS platform engineering

Automation

Security hardening

Stakeholder communication

Leadership

Tools

Endpoint management platforms

Software deployment

Identity and access integrations

Scripting / automation

Operational governance

Job description

Overview:

A Principle Desktop Engineering Architect is a senior-level technical expert and leader responsible for designing, implementing, and optimizing complex endpoint engineering solutions across both Windows and macOS environments. This role operates with a high degree of autonomy, leads advanced enterprise desktop initiatives, and influences technical strategy across endpoint platforms, management tools, security controls, user experience, and operational support teams.

Key Responsibilities

Technical Leadership & Architecture

Design and develop advanced endpoint engineering solutions across Windows and macOS platforms

Define architecture, standards, configuration baselines, and engineering patterns for enterprise desktop environments

Evaluate and introduce new technologies that improve endpoint security, manageability, automation, performance, and user experience

Lead platform strategy for Windows desktop engineering, macOS desktop engineering, device lifecycle management, endpoint configuration, and software delivery

Ensure solutions meet enterprise performance, security, compliance, resiliency, and operational support standards

Execution & Delivery

Lead end-to-end delivery of large-scale Windows and Mac desktop engineering initiatives

Translate business, security, compliance, and operational requirements into scalable endpoint solutions

Oversee testing, validation, deployment readiness, performance optimization, and production rollout activities

Support modern endpoint management capabilities, including policy enforcement, patching, application deployment, configuration management, and device compliance

Ensure quality, reliability, scalability, and supportability across both physical and virtual desktop environments

Stakeholder Engagement

Partner with engineering, infrastructure, security, and business teams

Act as a primary technical advisor to leadership

Communicate complex concepts to non-technical stakeholders

Leadership & Mentoring

Provide guidance and oversight to engineers

Mentor junior and mid-level engineers

Drive engineering best practices

Governance & Compliance

Ensure adherence to enterprise standards and audit controls

Support remediation of audit findings

Maintain documentation and technical standards

Education and Experience Required:

Combined minimum of 10 years’ higher education and/or experience in systems design, management, and/or architecture

Windows experience should include enterprise desktop architecture, Windows OS deployment and lifecycle management, Group Policy or modern policy management, patching, software distribution, endpoint security controls, and advanced troubleshooting.

Mac experience should include macOS platform engineering, Apple device management, configuration profiles, application packaging and deployment, OS

Deep technical expertise in enterprise desktop engineering with demonstrated experience across both Windows and macOS platforms.

Required capabilities include:

Advanced problem-solving, endpoint architecture, operating system lifecycle management, device configuration, patching, application delivery, automation, troubleshooting, security hardening, compliance alignment, stakeholder communication, and the ability to lead cross-functional technical initiatives.

Experience with endpoint management platforms, enterprise software deployment, identity and access integrations, vulnerability remediation, scripting or automation, and operational governance is strongly preferred.

Substantial hands-on and strategic experience supporting enterprise Windows desktop environments and meaningful experience engineering, managing, or integrating macOS platforms in a corporate environment

We support our team members with generous benefits.

Competitive compensation

Health, welfare, and retirement benefits

401(k) match at 5%

Work-life balance and flexible work arrangements

Banking Officers start with 25 days PTO plus 12 paid holidays

40 hours paid volunteer hours per year

Much more. For details, see: M&T Benefits Overview (https://www3.mtb.com/content/dam/mtb-web/mtb-migration/pdfs/health-care-benefits-overview.pdf)

#LI-JB3

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $139,700.00 - $232,900.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Buffalo, New York, United States of America

M&T Bank Corporation is an Equal Opportunity/Affirmative Action Employer, including disabilities and veterans.