Lead Cloud Network Engineer

Serves as a Lead Cloud Network Engineer responsible for the design, implementation, automation, support, and optimization of secure, scalable, and resilient networking solutions across public cloud and hybrid environments. Leverages platforms such as Microsoft Azure, Amazon Web Services (AWS), and multi-cloud networking technologies including Aviatrix to meet organizational objectives.

• Work closely with Technology management, senior engineers, Scrum Masters, and support teams to design, implement, and manage cloud networking solutions that meet current and future business requirements.
• Collaborate with internal clients and stakeholders to understand networking, connectivity, security, and infrastructure requirements and translate them into effective cloud-based solutions.
• Design, deploy, and optimize cloud networking architectures, including virtual networks, subnets, load balancers, DNS services, VPN gateways, and hybrid connectivity solutions.
• Configure and manage cloud-native network security controls including Network Security Groups (NSGs), cloud firewalls, DDoS protection services, and other security technologies.
• Implement, maintain, and optimize multi-cloud networking solutions utilizing platforms such as Aviatrix to deliver secure, scalable, and automated cloud connectivity.
• Automate cloud network provisioning, configuration, and lifecycle management using Infrastructure-as-Code (IaC) technologies, including Terraform.
• Participate in infrastructure reviews, architecture design, implementation planning, testing, migrations, upgrades, and operational support activities.
• Troubleshoot network-related incidents and performance issues using monitoring platforms, logs, packet captures, and diagnostic tools such as Wireshark.
• Develop and maintain technical documentation including network diagrams, configuration standards, operational procedures, architectural designs, and support documentation.
• Coordinate vendor interactions and support engagements as required to resolve technical issues and support project initiatives.
• Monitor network traffic, system performance, and security alerts to proactively identify and mitigate risks, threats, and service disruptions.
• Integrate cloud networking solutions with enterprise infrastructure, security platforms, and application environments.
• Participate in capacity planning, disaster recovery testing, compliance initiatives, and operational readiness activities.
• Mentor and coach less experienced engineers and technical staff. Review designs, documentation, and proposed changes to ensure adherence to standards and best practices.
• Follow and promote industry best practices, cloud networking standards, and security frameworks including NIST, CIS Benchmarks, and FFIEC guidance.
• Maintain a detailed understanding of cloud provider networking services, vendor technologies, and evolving cloud networking trends.
• Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Identify risk-related issues requiring escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit findings and remediation activities.
• Complete other related duties as assigned.

Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture

Minimum of 3 years of professional experience supporting, implementing, and optimizing cloud networking or hybrid networking environments within a complex enterprise environment.

Experience designing, deploying, and managing public cloud networking services within Microsoft Azure, AWS, or similar cloud platforms.

Experience implementing and maintaining hybrid networking solutions utilizing VPNs, dedicated private connectivity, and cloud-native networking technologies.

Hands-on experience with Infrastructure-as-Code (IaC) technologies, including Terraform.

Strong understanding of TCP/IP networking, routing, DNS, VPN technologies, NAT, load balancing, and network security principles.

Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Network Engineering, or a related field.

Microsoft Certified: Azure Network Engineer Associate, AWS Certified Advanced Networking – Specialty, or similar cloud networking certifications.

Experience with multi-cloud networking platforms such as Aviatrix.

Experience with cloud-native automation technologies including Azure Resource Manager (ARM), AWS CloudFormation, and/or Ansible.

Advanced technical skills supporting cloud networking, hybrid networking, and infrastructure automation.

Advanced analytical, troubleshooting, and problem-solving skills.

Strong expertise in cloud-native networking technologies including virtual networks, cloud firewalls, VPN gateways, dedicated connectivity solutions, and load balancing services.

Ability to analyze network packet captures and troubleshoot complex connectivity and performance issues using tools such as Wireshark.

Ability to translate complex business and technical requirements into secure, scalable, and supportable networking solutions.

Advanced knowledge of cloud security controls, governance models, and regulatory compliance frameworks.

Ability to solicit, gather, document, and analyze technical requirements from a diverse group of stakeholders.

Strong understanding of how cloud networking technologies interact with enterprise infrastructure, security services, and application platforms.

Excellent written and verbal communication skills.

Effective influencing and collaboration skills.

Process-oriented with strong organizational skills.

Logical thinker with the ability to work independently and collaboratively in a team environment.

Adaptable and capable of learning new technologies in a rapidly evolving cloud environment.