Senior Cybersecurity Encryption Engineer

This role is four days onsite at our Wilmington, DE location, with the flexibility to work from home one day per week Overview:    We are seeking a highly skilled Senior Encryption Engineer, where you'll play a crucial role in ensuring the security and integrity of our infrastructure. This pivotal role involves supporting the design and implementation of our Public Key Infrastructure (PKI) and encryption solutions. The ideal candidate will exhibit expertise in cryptographic protocols, possess a deep understanding of PKI, and demonstrate the ability to create and maintain secure cryptographic environments. Primary Responsibilities:   Design and implement encryption and PKI solutions to secure digital transactions, communications, and data within the bank  Manage and maintain the bank's encryption infrastructure to ensure compliance with industry standards  Provide expertise and support for cryptographic key management, including key generation, distribution, and revocation  Stay abreast of industry trends and emerging technologies related to PKI, encryption, and cybersecurity to enhance the bank's security posture  Oversee the day-to-day operations of PKI services, including certificate issuance, renewal, revocation, and key management  Drive automation initiatives to streamline PKI processes and enhance service delivery efficiency  Evaluate emerging technologies and tools, making recommendations for their integration and optimization of our service offering  Work closely with Technology management, senior Engineers, and support teams on a regular basis to implement and manage the design, development, and execution of technical solutions that meet or exceed current and future needs of the organization.   Responsibilities may include infrastructure review, implementation, and design, creation of support and architectural documentation, standards, policies, analysis, and testing.  Regularly and independently interact with business partners of varying associate and management levels to ensure clarity of the problem/opportunity and elicit business requirements.  Coordinate vendor interactions and/or vendor resources as needed.  Mentor and coach less experienced engineers, technicians, and integrators.  Review documentation, proposals, and changes proposed by less experienced staff.  Seek to expand knowledge and understanding of Financial Services trends, practices, and technologies on a continuous basis.     Follow and promote use of industry best practices, standards and procedures.  Maintain a strong aptitude and working knowledge of Bank applications, systems, development environments.  Maintain a detailed understanding of vendor technologies and services used by the Bank.  Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite.  Identify risk-related issues needing escalation to management.  Promote an environment that supports diversity and reflects the M&T Bank brand.  Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.  Complete other related duties as assigned.  Scope of Responsibilities: Partners primarily with individual contributors and leaders within Cybersecurity and Technology, and occasionally senior leaders within Cybersecurity. Determines and develops approach to solutions. Work is accomplished with periodic check-ins for alignment and limited direction. Work is evaluated upon completion to ensure objectives have been met. Proficient ability to use multiple Cybersecurity tools, specific to function. Manager Responsibilities: No supervisory responsibilities. Education and Experience Required: Bachelor's degree and a minimum of 3 years’ relevant work experience, or in lieu of a degree, a combined minimum of 7 years’ higher education and/or work experience Experience with PKI technologies including digital certificates, Certificate Authorities (CAs), Post Quantum Cryptography (PQC), and Hardware Security Modules (HSMs)  Strong understanding of cryptographic protocols, algorithms, and key management practices  In-depth knowledge of encryption technologies, including design, implementation, and administration  Experience with scripting and programming languages (e.g., Python, PowerShell) for automating security tasks utilizing APIs and developing use cases  Strong understanding of Encryption Standards, Procedures, and industry best practices Education and Experience Preferred: Bachelor’s degree in Computer Science or Computer Engineering  Minimum 6 years’ professional experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications  Strong knowledge of regulatory compliance standards related to encryption and data protection controls within the banking sector  Working knowledge and familiarity with PKI and encryption providers such as Keyfactor, Thales, DigiCert, etc.  Professional certifications in information security and encryption technologies, such as Certified Information Systems Security Professional (CISSP), Certified Encryption Specialist (CES), or Certified Information Security Manager (CISM), are highly desirable  Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches  Advanced problem solving skills  Advanced knowledge and advanced expertise in industry and/or vendor technologies  Able to solicit, gather, document, and analyze system specification and requirements  Ability to work independently and collaboratively with others in team environment  Ability to use effective facilitation skills and techniques to elicit and review requirements from a diverse rang