Senior ACF2 Security Engineer (Hybrid)

Title Senior ACF2 Security Engineer

Position Contract to Hire

Location Hybrid (Buffalo, NY / Baltimore, MD / Wilmington, DE / Stamford, CT)

Primary Responsibilities:

• Collaborate with Scrum Masters, Project Managers, Application Developers, and Systems Technology teams to design, implement, and validate security solutions for new and existing applications.
• Participate in Mainframe Security strategy, roadmap development, and continuous improvement initiatives.
• Develop and maintain security procedures, standards, documentation, and operational runbooks.
• Support audits, regulatory examinations, and remediation activities related to access management and security controls.
• Review, maintain, and distribute Mainframe Security recertification, compliance, and audit reports.
• Serve as a subject matter expert for ACF2 security architecture, rule administration, CPF propagation, identity governance, privileged access management, and access controls.
• Design and support role based access control (RBAC), entitlement governance, and access recertification processes.
• Design, implement, and maintain security controls supporting compliance with corporate policies, regulatory requirements, and industry standards.
• Support security monitoring, threat detection, incident response, and logging integration efforts in partnership with Cybersecurity teams.
• Implement and maintain data protection controls, including encryption, key management, digital certificates, and secure communications.
• Analyze and document application dependencies, resource ownership, and security mappings to support governance and auditability.
• Facilitate technical engagements with vendors and business partners to deliver secure and effective solutions.
• Provide Level 2 support for Identity and Access Management and Mainframe Security services.
• Troubleshoot SailPoint IIQ and related identity governance solutions for complex provisioning and access issues.
• Utilize security administration and recovery utilities to manage and recover access control data and security configurations.
• Maintain expertise in Bank applications, development environments, vendor products, and emerging security technologies.
• Collaborate with Cybersecurity, Infrastructure, and Identity teams to integrate mainframe security capabilities with enterprise security services.
• Identify security risks, vulnerabilities, and control gaps and develop appropriate mitigation strategies.
• Support disaster recovery planning, cyber recovery testing, resiliency exercises, and security validation activities.
• Mentor and coach less experienced engineers, administrators, technicians, and integrators.
• Pursue continuous professional development in Financial Services, cybersecurity, identity governance, and mainframe technologies.
• Adhere to the Company's risk and regulatory standards and escalate issues.
• Promote an inclusive work environment that reflects M&T Bank's values.
• Provide support for high severity production incidents during business and non-business hours as required.

Education and Experience Required:

• Combined minimum of 8 years higher education and/or work experience in mainframe security administration, mainframe infrastructure, systems management and/or mainframe architecture
• Ability to lead technical initiatives spanning multiple teams and organizations
• Ability to influence technical decisions without direct authority
• Ability to govern service accounts, batch logon IDs, privileged IDs, and other non human identities throughout their lifecycle.
• Demonstrated ability to translate technical risks into business impact for leadership audiences
• Strong analytical and problem solving skills with focus on root cause analysis and remediation
• Experience with Zero Trust, privileged access governance, and security monitoring concepts
• Experience managing SSL/TLS digital certificates for internal and external mainframe services.

Education and Experience Preferred:

• Bachelor s degree in Computer Science or Computer Engineering
• Minimum 10 years professional experience in a Mainframe Systems Programming, Security Engineering or Security Administration position.
• Experience coding in multiple programming languages (EasyTrieve, Rexx, COBOL, EARL, SAS, Assembler, CA Utility) to support reports
• Experience with report writing for ACF2
• Experience working in Financial Services