Senior Cloud Network Engineer

M&T Bank; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

M&T Bank is seeking an experienced Cloud Network Engineer for a hybrid role at its Buffalo, NY location. The role focuses on design, automation, and optimization of cloud and hybrid networks across Azure, AWS, and multi-cloud platforms such as Aviatrix.

You will partner with technology leaders and engineers to deliver secure, scalable networking solutions. The candidate will implement IaC with Terraform, lead architectural discussions, and mentor junior staff while adhering to industry standards

Qualifications

• Six years combined education/experience in systems, networking, or cloud infra.
• At least 3 years in cloud/hybrid networking in a complex enterprise.
• Experience with Azure and/or AWS cloud networking services.
• Hybrid networking: VPNs, private connectivity, cloud-native tech.
• IaC: Terraform or similar tooling.
• Strong TCP/IP, routing, DNS, VPN, NAT, load balancing, and security.

Responsibilities

• Design, implement, and manage cloud networking solutions aligning to business needs.
• Collaborate with stakeholders to translate requirements into cloud-based networks.
• Design, deploy, and optimize networks: VNets, subnets, load balancers, DNS, VPNs.
• Configure cloud security controls: NSGs, firewalls, DDoS protection.
• Utilize Aviatrix for multi-cloud connectivity and automation.
• Automate provisioning/configuration with IaC (Terraform).
• Participate in reviews, migrations, upgrades, and operational support.
• Troubleshoot network incidents with monitoring, logs, Wireshark.
• Develop and maintain network diagrams and runbooks.
• Coordinate with vendors and support engagements as needed.
• Monitor performance and security, mitigate risks and outages.
• Align cloud networking with enterprise security and risk standards.

Skills

Cloud networking

Azure

AWS

Networking fundamentals

Security principles

Education

Bachelor's degree in CS/CE/IT

Azure Network Engineer Associate

AWS Advanced Networking - Specialty

Tools

Terraform

Job description

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week

Serves as an advanced Cloud Network Engineer responsible for the design, implementation, automation, optimization, and support of cloud and hybrid networking solutions across public cloud environments. This role partners with Technology leadership, engineering teams, and business stakeholders to deliver secure, scalable, and highly available networking solutions leveraging Microsoft Azure, AWS, and multi-cloud networking platforms such as Aviatrix.

Primary Responsibilities:

• Work closely with Technology management, senior engineers, Scrum Masters, and support teams to design, implement, and manage cloud networking solutions that meet current and future business requirements.
• Collaborate with internal clients and stakeholders to understand networking, connectivity, security, and infrastructure requirements and translate them into effective cloud-based solutions.
• Design, deploy, and optimize cloud networking architectures, including virtual networks, subnets, load balancers, DNS services, VPN gateways, and hybrid connectivity solutions.
• Configure and manage cloud-native network security controls including Network Security Groups (NSGs), cloud firewalls, DDoS protection services, and other security technologies.
• Implement, maintain, and optimize multi-cloud networking solutions utilizing platforms such as Aviatrix to deliver secure, scalable, and automated cloud connectivity.
• Automate cloud network provisioning, configuration, and lifecycle management using Infrastructure-as-Code (IaC) technologies, including Terraform.
• Participate in infrastructure reviews, architecture design, implementation planning, testing, migrations, upgrades, and operational support activities.
• Troubleshoot network-related incidents and performance issues using monitoring platforms, logs, packet captures, and diagnostic tools such as Wireshark.
• Develop and maintain technical documentation including network diagrams, configuration standards, operational procedures, architectural designs, and support documentation.
• Coordinate vendor interactions and support engagements as required to resolve technical issues and support project initiatives.
• Monitor network traffic, system performance, and security alerts to proactively identify and mitigate risks, threats, and service disruptions.
• Integrate cloud networking solutions with enterprise infrastructure, security platforms, and application environments.
• Participate in capacity planning, disaster recovery testing, compliance initiatives, and operational readiness activities.
• Mentor and coach less experienced engineers and technical staff. Review designs, documentation, and proposed changes to ensure adherence to standards and best practices.
• Follow and promote industry best practices, cloud networking standards, and security frameworks including NIST, CIS Benchmarks, and FFIEC guidance.
• Maintain a detailed understanding of cloud provider networking services, vendor technologies, and evolving cloud networking trends.
• Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Identify risk-related issues requiring escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit findings and remediation activities.
• Complete other related duties as assigned.

Education and Experience Required:

• Combined minimum of 6 years of higher education and/or work experience in systems engineering, network engineering, cloud infrastructure, architecture, or related technical disciplines.
• Minimum of 3 years of professional experience supporting, implementing, and optimizing cloud networking or hybrid networking environments within a complex enterprise environment.
• Experience designing, deploying, and managing public cloud networking services within Microsoft Azure, AWS, or similar cloud platforms.
• Experience implementing and maintaining hybrid networking solutions utilizing VPNs, dedicated private connectivity, and cloud-native networking technologies.
• Hands-on experience with Infrastructure-as-Code (IaC) technologies, including Terraform.
• Strong understanding of TCP/IP networking, routing, DNS, VPN technologies, NAT, load balancing, and network security principles

Education and Experience Preferred:

• Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Network Engineering, or a related field.
• Microsoft Certified: Azure Network Engineer Associate, AWS Certified Advanced Networking - Specialty, or similar cloud networking certifications.
• Experience with multi-cloud networking platforms such as Aviatrix.
• Experience with cloud-native automation technologies including Azure Resource Manager (ARM), AWS CloudFormation, and/or Ans