Senior Mainframe Security Engineer (ACF2)

About the role

Senior ACF2 Security Engineer – Hybrid position based in Buffalo NY, Baltimore MD, Wilmington DE, or Stamford CT. W2 contract, 6+ months duration.

Responsibilities

• Collaborate with Scrum Masters, Project Managers, Application Developers, and Systems Technology teams to design, implement, and validate security solutions for new and existing applications.
• Participate in Mainframe Security strategy, roadmap development, and continuous improvement initiatives.
• Develop and maintain security procedures, standards, documentation, and operational runbooks.
• Support audits, regulatory examinations, and remediation activities related to access management and security controls.
• Review, maintain, and distribute Mainframe Security recertification, compliance, and audit reports.
• Serve as a subject matter expert for ACF2 security architecture, rule administration, CPF propagation, identity governance, privileged access management, and access controls.
• Design and support role based access control (RBAC), entitlement governance, and access recertification processes.
• Design, implement, and maintain security controls supporting compliance with corporate policies, regulatory requirements, and industry standards.
• Support security monitoring, threat detection, incident response, and logging integration efforts in partnership with Cybersecurity teams.
• Implement and maintain data protection controls, including encryption, key management, digital certificates, and secure communications.
• Analyze and document application dependencies, resource ownership, and security mappings to support governance and auditability.
• Facilitate technical engagements with vendors and business partners to deliver secure and effective solutions.
• Provide Level 2 support for Identity and Access Management and Mainframe Security services.
• Troubleshoot SailPoint IIQ and related identity governance solutions for complex provisioning and access issues.
• Utilize security administration and recovery utilities to manage and recover access control data and security configurations.
• Maintain expertise in Bank applications, development environments, vendor products, and emerging security technologies.
• Collaborate with Cybersecurity, Infrastructure, and Identity teams to integrate mainframe security capabilities with enterprise security services.
• Identify security risks, vulnerabilities, and control gaps and develop appropriate mitigation strategies.
• Support disaster recovery planning, cyber recovery testing, resiliency exercises, and security validation activities.
• Mentor and coach less experienced engineers, administrators, technicians, and integrators.
• Pursue continuous professional development in Financial Services, cybersecurity, identity governance, and mainframe technologies.
• Adhere to the Company's risk and regulatory standards and escalate issues.
• Promote an inclusive work environment that reflects M&T Bank's values.
• Provide support for high severity production incidents during business and non-business hours as required.

Requirements

• Combined minimum of 8 years' higher education and/or work experience in mainframe security administration, mainframe infrastructure, systems management and/or mainframe architecture.
• Ability to lead technical initiatives spanning multiple teams and organizations.
• Ability to influence technical decisions without direct authority.
• Ability to govern service accounts, batch logon IDs, privileged IDs, and other non-human identities throughout their lifecycle.
• Demonstrated ability to translate technical risks into business impact for leadership audiences.
• Strong analytical and problem solving skills with focus on root cause analysis and remediation.
• Experience with Zero Trust, privileged access governance, and security monitoring concepts.
• Experience managing SSL/TLS digital certificates for internal and external mainframe services.

Qualifications

• Bachelor's