Senior PKI & Encryption Engineer — Hybrid (Buffalo)

M&T Bank; Buffalo (NY); Hybrid; USD 97,000 - 162,000; Full time

Job summary

M&T Bank is seeking a Senior Encryption Engineer to design and implement PKI and encryption solutions at our Buffalo, NY facility. The role emphasizes securing digital transactions, data, and communications while maintaining policy-compliant encryption infrastructure.

You will manage certificate issuance, renewal, and key management, and drive automation initiatives to improve PKI processes. Experience with PKI technologies, cryptographic protocols, and scripting is essential.

Qualifications

• Bachelor's degree or higher in a related field.
• Experience with PKI technologies including digital certificates, CAs, PQC, and HSMs.
• Strong understanding of cryptographic protocols, algorithms, and key management practices.
• Experience with encryption technologies in design, implementation, and administration.
• Scripting/automation experience using Python or PowerShell.
• Knowledge of encryption standards and industry best practices.

Responsibilities

• Design and implement encryption and PKI solutions to secure transactions, communications, and data.
• Manage and maintain the encryption infrastructure to ensure compliance with standards.
• Provide expertise for cryptographic key management including generation, distribution, and revocation.
• Stay current on PKI, encryption, and cybersecurity trends to enhance security.
• Oversee PKI services: certificate issuance, renewal, revocation, key management.
• Drive automation to streamline PKI processes and improve service delivery.

Skills

PKI

Cryptographic protocols

Python

PowerShell

Scripting

Security engineering

Education

Bachelor's degree in Computer Science or Computer Engineering

CISSP, CES or CISM (preferred)

Tools

Keyfactor

Thales

DigiCert

Job description

M&T Bank is seeking a Senior Encryption Engineer to design and implement PKI and encryption solutions at our Buffalo, NY facility. The role emphasizes securing digital transactions, data, and communications while maintaining policy-compliant encryption infrastructure.

You will manage certificate issuance, renewal, and key management, and drive automation initiatives to improve PKI processes. Experience with PKI technologies, cryptographic protocols, and scripting is essential.