Senior PAM Engineer

This role is four days onsite at our Seneca One Buffalo, NY location, with the flexibility to work from home one day per week
Overview: ** **

Responsible for designing and implementing large scale-scale security systems and solutions to develop or enhance new or existing security solutions, solving advanced complex problems or enhancements. Acts as knowledge resource for and trains less experienced engineers. Completes day-to-day support activities and special projects.

• Lead the design, deployment, and integration of Privileged Access Management (PAM) solutions.
• Customize and configure PAM tools (e.g., Cyber Ark, Beyond Trust, Thycotic) to meet organizational needs.
• Develop and implement policies, procedures, and practices related to PAM.
• Manage and maintain PAM systems, ensuring high availability, scalability, and performance.
• Monitor PAM environments for compliance with security policies and audit requirements.
• Conduct regular audits and assessments of privileged accounts to ensure compliance with security policies.
• Collaborate with internal audit and compliance teams to ensure adherence to regulatory requirements.
• Provide guidance and training to internal teams on the effective use of PAM tools.
• Define and implement tuning methodologies for systems and technologies, using advanced analytical techniques to maximize efficiencies.
• Develop and implement automation and orchestration for complex systems to streamline security operations and response activities.
• Lead collaboration efforts with Cybersecurity and Technology teams to effectively implement and maintain security solutions for the organization.
• Lead improvement initiatives within Cybersecurity team, implementing best practices and optimizing processes to enhance security capabilities.
• Actively partner with vendor to optimize security products and/or drive resolution of complex support issues.
• Assist leadership with vendor relationships by maintaining when licenses need to be renewed, informing when hardware needs to be refreshed or new technologies should be considered.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

• This role is used in one or more of the following cybersecurity function:
  • Identity and Access Engineering – develops and manages the architecture, automation, and control mechanisms for provisioning of least privilege access for employees and contractors to internal and 3rd party systems, applications, and data sources.
• Partners primarily with individual contributors and leaders within Cybersecurity and Technology, and occasionally senior leaders within Cybersecurity.
• Determines and develops approach to solutions. Work is accomplished with periodic check-ins for alignment and limited direction. Work is evaluated upon completion to ensure objectives have been met.
• Proficient ability to use multiple Cybersecurity tools, specific to function.

• Bachelor’s degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience

• Intermediate understanding ofPAM security system development and…