Cloud Storage Platform Engineer at M&T Bank

Job description

Location: Buffalo, NY (Seneca One) / Hybrid - 4 days in office Team: Infrastructure Engineering – Storage & Data Protection About the Role We re looking for a Cloud Storage Platform Engineer to help design, build, and improve enterprise storage and data protection services in AWS and Azure. You ll use Infrastructure-as-Code (IaC) to automate backup, recovery, storage provisioning, and cyber resiliency. You ll also make sure our cloud storage platforms meet enterprise standards for security, operations, and compliance. This role suits an engineer who likes automation, cares about reliability, and wants to help protect the organization s most important data. Key Responsibilities Design and implement enterprise storage and data protection services in AWS, including S3, EBS, EFS, FSx, and AWS Backup. Develop Infrastructure-as-Code with tools such as Terraform, CloudFormation, or AWS CDK to automate backup, recovery, storage provisioning, and cyber resiliency workflows. Build repeatable automation for provisioning, configuration management, monitoring, reporting, and policy enforcement. Align cloud storage platforms with enterprise standards, operational procedures, security controls, and regulatory and compliance requirements. Strengthen cyber resiliency with immutable backups, vault lock, cross-account and cross-region replication, and tested recovery procedures. Implement monitoring and reporting for backup success, capacity, cost, and compliance posture. Create and maintain documentation, including runbooks, architecture diagrams, and standard operating procedures. Collaborate with cloud, security, application, and operations teams to deliver secure and scalable storage solutions. Take part in continuous improvement efforts, incident response, root cause analysis, and patching and maintenance cycles. Required Qualifications Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture 3 years of experience in infrastructure, storage, or cloud engineering. Hands-on experience with AWS storage and data protection services, such as S3, EBS, EFS, FSx, AWS Backup, and Glacier. Proficiency with IaC tools such as Terraform, Ansible, CloudFormation, or AWS CDK. Scripting or programming experience in Python, PowerShell, or Bash. Understanding of backup and recovery concepts, including RPO/RTO, retention, replication, and disaster recovery. Familiarity with security controls such as IAM, KMS encryption, and least-privilege access. Experience with version control (Git) and CI/CD pipelines. Preferred Qualifications AWS certifications, such as Solutions Architect, SysOps Administrator, or DevOps Engineer. Experience with enterprise backup platforms, such as Commvault, Rubrik, Cohesity, or Veeam, in hybrid or cloud environments. Knowledge of cyber resiliency practices, such as air-gapped and immutable backups and ransomware recovery. Experience with compliance frameworks, such as SOX, PCI-DSS, NIST, or FFIEC. Familiarity with configuration management tools, such as Ansible, and policy-as-code tools, such as AWS Config, Service Control Policies (SCPs), or OPA. Experience with monitoring and reporting tools, such as CloudWatch, Splunk, or Grafana. Key Competencies Strong automation-first mindset Analytical, structured problem-solving Clear written and verbal communication Ability to work across teams in a regulated enterprise environment Commitment to continuous learning and improve M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $116,400.00 - $194,000.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation. Location Buffalo, New York, United States of America

Requirements

Must-haves

Location: Buffalo, NY (Seneca One) / Hybrid - 4 days in office Team: Infrastructure Engineering – Storage & Data Protection
This role suits an engineer who likes automation, cares about reliability, and wants to help protect the organization s most important data.
Key Responsibilities Design and implement enterprise storage and data protection services in AWS, including S3, EBS, EFS, FSx, and AWS Backup.
Develop Infrastructure-as-Code with tools such as Terraform, CloudFormation, or AWS CDK to automate backup, recovery, storage provisioning, and cyber resiliency workflows.
Build repeatable automation for provisioning, configuration management, monitoring, reporting, and policy enforcement.
Align cloud storage platforms with enterprise standards, operational procedures, security controls, and regulatory and compliance requirements.
Strengthen cyber resiliency with immutable backups, vault lock, cross-account and cross-region replication, and tested recovery procedures.
Implement monitoring and reporting for backup success, capacity, cost, and compliance posture.
Create and maintain documentation, including runbooks, architecture diagrams, and standard operating procedures.
Collaborate with cloud, security, application, and operations teams to deliver secure and scalable storage solutions.
Take part in continuous improvement efforts, incident response, root cause analysis, and patching and maintenance cycles.
Required Qualifications Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture
3 years of experience in infrastructure, storage, or cloud engineering.
Hands-on experience with AWS storage and data protection services, such as S3, EBS, EFS, FSx, AWS Backup, and Glacier.
Proficiency with IaC tools such as Terraform, Ansible, CloudFormation, or AWS CDK.
Scripting or programming experience in Python, PowerShell, or Bash.
Understanding of backup and recovery concepts, including RPO/RTO, retention, replication, and disaster recovery.
Familiarity with security controls such as IAM, KMS encryption, and least-privilege access.
Experience with version control (Git) and CI/CD pipelines.
Experience with enterprise backup platforms, such as Commvault, Rubrik, Cohesity, or Veeam, in hybrid or cloud environments.
Knowledge of cyber resiliency practices, such as air-gapped and immutable backups and ransomware recovery.
Experience with compliance frameworks, such as SOX, PCI-DSS, NIST, or FFIEC.
Familiarity with configuration management tools, such as Ansible, and policy-as-code tools, such as AWS Config, Service Control Policies (SCPs), or OPA.

Nice-to-haves

Preferred Qualifications AWS certifications, such as Solutions Architect, SysOps Administrator, or DevOps Engineer.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazurepythonci/cd

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Vision