Senior PAM Engineer

M&T Bank; Buffalo (NY); Hybrid; USD 97,000 - 162,000; Full time

Job summary

M&T Bank is seeking an experienced security engineer to design and implement large-scale Privileged Access Management (PAM) solutions at the Seneca One Buffalo location, with a four-days-onsite, one-day-remote work arrangement. You will lead PAM deployment, customize tools, and develop security policies and practices.

You will audit privileged accounts, ensure regulatory and security compliance, train teams, and collaborate with Cybersecurity and Technology to optimize operations.

Qualifications

• Bachelor’s degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience.
• Intermediate understanding of PAM security system development and infrastructure lifecycle and architecture, and systems design
• Proven experience with the development and customization of PAM tools utilized in assigned Cybersecurity function
• Experience translating architecture into technical requirements
• Proficient level of critical thinking and problem solving
• Excellent written and verbal communication skills
• Proven experience collaborating with leaders to execute results
• Prior experience seeking buy-in of others to align on processes
• Ability to analyze and draw conclusions based on quantitative data from multiple sources

Responsibilities

• Lead the design, deployment, and integration of Privileged Access Management (PAM) solutions.
• Customize and configure PAM tools to meet organizational needs.
• Develop and implement policies, procedures, and practices related to PAM.
• Manage and maintain PAM systems, ensuring high availability, scalability, and performance.
• Monitor PAM environments for compliance with security policies and audit requirements.
• Conduct regular audits and assessments of privileged accounts to ensure compliance with security policies.
• Collaborate with internal audit and compliance teams to ensure adherence to regulatory requirements.
• Provide guidance and training to internal teams on the effective use of PAM tools.
• Define and implement tuning methodologies for systems and technologies, using advanced analytical techniques to maximize efficiencies.
• Develop and implement automation and orchestration for complex systems to streamline security operations and response activities.
• Lead collaboration efforts with Cybersecurity and Technology teams to effectively implement and maintain security solutions for the organization.
• Lead improvement initiatives within Cybersecurity team, implementing best practices and optimizing processes to enhance security capabilities.
• Actively partner with vendor to optimize security products and/or drive resolution of complex support issues.
• Assist leadership with vendor relationships by maintaining when licenses need to be renewed, informing when hardware needs to be refreshed or new technologies should be considered.

Skills

PAM design

PAM customization

Policy development

Analytical thinking

Communication

Education

Bachelor’s degree or equivalent experience

Tools

CyberArk

BeyondTrust

Thycotic

Job description

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week

Overview: ** **

Responsible for designing and implementing large scale-scale security systems and solutions to develop or enhance new or existing security solutions, solving advanced complex problems or enhancements. Acts as knowledge resource for and trains less experienced engineers. Completes day-to-day support activities and special projects.

Primary Responsibilities:

• Lead the design, deployment, and integration of Privileged Access Management (PAM) solutions.
• Customize and configure PAM tools (e.g., CyberArk, BeyondTrust, Thycotic) to meet organizational needs.
• Develop and implement policies, procedures, and practices related to PAM.
• Manage and maintain PAM systems, ensuring high availability, scalability, and performance.
• Monitor PAM environments for compliance with security policies and audit requirements.
• Conduct regular audits and assessments of privileged accounts to ensure compliance with security policies.
• Collaborate with internal audit and compliance teams to ensure adherence to regulatory requirements.
• Provide guidance and training to internal teams on the effective use of PAM tools.
• Define and implement tuning methodologies for systems and technologies, using advanced analytical techniques to maximize efficiencies.
• Develop and implement automation and orchestration for complex systems to streamline security operations and response activities.
• Lead collaboration efforts with Cybersecurity and Technology teams to effectively implement and maintain security solutions for the organization.
• Lead improvement initiatives within Cybersecurity team, implementing best practices and optimizing processes to enhance security capabilities.
• Actively partner with vendor to optimize security products and/or drive resolution of complex support issues.
• Assist leadership with vendor relationships by maintaining when licenses need to be renewed, informing when hardware needs to be refreshed or new technologies should be considered.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Scope of Responsibilities:

• This role is used in one or more of the following cybersecurity function:
  • Identity and Access Engineering – develops and manages the architecture, automation, and control mechanisms for provisioning of least privilege access for employees and contractors to internal and 3rd party systems, applications, and data sources.
• Partners primarily with individual contributors and leaders within Cybersecurity and Technology, and occasionally senior leaders within Cybersecurity.
• Determines and develops approach to solutions. Work is accomplished with periodic check-ins for alignment and limited direction. Work is evaluated upon completion to ensure objectives have been met.
• Proficient ability to use multiple Cybersecurity tools, specific to function.

Education and Experience Required:

• Bachelor’s degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience

Education and Experience Preferred:

• Intermediate understanding ofPAM security system development and infrastructure lifecycle and architecture, and systems design
• Proven experience with the development and customization of PAM tools utilized in assigned Cybersecurity function
• Experience translating architecture into technical requirements.
• Proficient level of critical thinking and problem solving
• Excellent written and verbal communication skills
• Proven experience collaborating with leaders to execute results.
• Prior experience seeking buy-in of others to align on processes.
• Ability to analyze and draw conclusions based on quantitative data from multiple sources.

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $97,100.00 - $161,800.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Buffalo, New York, United States of America