PKI Engineer, Buffalo, NY

Job Title: PKI Engineer

Client: M&T Bank
Location: Onsite from Day 1 Buffalo, NY (near Niagara Falls/Canadian border) or Wilmington, DE
Duration: 12 months to start (likely to extend up to 18 months)
Work Authorization: only (W2)

Interview Process: 2 3 WebEx rounds
Req ID: 2042 (Please confirm the candidate has NOT been submitted to this req previously)

Role Overview:

M&T Bank is seeking a Senior PKI/Encryption Engineer to join their cybersecurity team, supporting and enhancing the enterprise encryption standards and public key infrastructure (PKI) systems. The ideal candidate will have robust experience with encryption technologies, certificate management, and PKI tools such as Keyfactor and DigiCert.

Key Responsibilities:

• Lead the management and maintenance of enterprise PKI infrastructure
• Oversee encryption protocols and ensure adherence to internal standards and compliance frameworks
• Manage public certificates (ideally using DigiCert) and certificate lifecycle management
• Develop, enhance, and support API integrations to encryption and certificate services
• Maintain and improve documentation for encryption standards and procedures
• Provide technical guidance on encryption and PKI best practices
• Collaborate with infrastructure, security, and application teams to support secure communication and data protection

Required Skills & Experience:

1. Senior-level experience in encryption engineering within enterprise environments
2. Hands-on PKI experience, preferably with Keyfactor platform
3. Public certificate management experience (DigiCert strongly preferred)
4. Proven ability to create and maintain encryption standards, procedures, and documentation
5. Experience with API creation/integration for certificate and encryption-related functions

Candidate Submission Checklist:

Please include the following for all submissions:

• Updated resume
• Month/Day of Birth
• Last 4 digits of SSN
• Confirmation that they have not been submitted to REQ 2042 previously
• Clear breakdown of experience with the following:
  • PKI tools used (with versions if possible)
  • Encryption technologies and standards followed
  • Public certificate management systems
  • API development/integration experience
  • Any relevant regulatory or compliance experience