Cloud Storage Platform Engineer

M&T Bank | Banking

1h 18m ago

Hybrid

Full Time

United States of America

$116.4k - $194k USD/yr

Location: Buffalo, NY (Seneca One) / Hybrid - 4 days in office

Team: Infrastructure Engineering – Storage & Data Protection

About the Role

We're looking for a Cloud Storage Platform Engineer to help design, build, and improve enterprise storage and data protection services in AWS and Azure. You'll use Infrastructure-as-Code (IaC) to automate backup, recovery, storage provisioning, and cyber resiliency. You'll also make sure our cloud storage platforms meet enterprise standards for security, operations, and compliance.

This role suits an engineer who likes automation, cares about reliability, and wants to help protect the organization's most important data.

Key Responsibilities

Design and implement enterprise storage and data protection services in AWS, including S3, EBS, EFS, FSx, and AWS Backup.
Develop Infrastructure-as-Code with tools such as Terraform, CloudFormation, or AWS CDK to automate backup, recovery, storage provisioning, and cyber resiliency workflows.
Build repeatable automation for provisioning, configuration management, monitoring, reporting, and policy enforcement.
Align cloud storage platforms with enterprise standards, operational procedures, security controls, and regulatory and compliance requirements.
Strengthen cyber resiliency with immutable backups, vault lock, cross-account and cross-region replication, and tested recovery procedures.
Implement monitoring and reporting for backup success, capacity, cost, and compliance posture.
Create and maintain documentation, including runbooks, architecture diagrams, and standard operating procedures.
Collaborate with cloud, security, application, and operations teams to deliver secure and scalable storage solutions.
Take part in continuous improvement efforts, incident response, root cause analysis, and patching and maintenance cycles.

Required Qualifications

Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture
3+ years of experience in infrastructure, storage, or cloud engineering.
Hands-on experience with AWS storage and data protection services, such as S3, EBS, EFS, FSx, AWS Backup, and Glacier.
Proficiency with IaC tools such as Terraform, Ansible, CloudFormation, or AWS CDK.
Scripting or programming experience in Python, PowerShell, or Bash.
Understanding of backup and recovery concepts, including RPO/RTO, retention, replication, and disaster recovery.
Familiarity with security controls such as IAM, KMS encryption, and least-privilege access.
Experience with version control (Git) and CI/CD pipelines.

Preferred Qualifications

AWS certifications, such as Solutions Architect, SysOps Administrator, or DevOps Engineer.
Experience with enterprise backup platforms, such as Commvault, Rubrik, Cohesity, or Veeam, in hybrid or cloud environments.
Knowledge of cyber resiliency practices, such as air-gapped and immutable backups and ransomware recovery.
Experience with compliance frameworks, such as SOX, PCI-DSS, NIST, or FFIEC.
Familiarity with configuration management tools, such as Ansible, and policy-as-code tools, such as AWS Config, Service Control Policies (SCPs), or OPA.
Experience with monitoring and reporting tools, such as CloudWatch, Splunk, or Grafana.

Key Competencies

Strong automation-first mindset
Analytical, structured problem-solving
Clear written and verbal communication
Ability to work across teams in a regulated enterprise environment
Commitment to continuous learning and improve

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $116,400.00 - $194,000.00 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.

Location

Buffalo, New York, United States of America

Required Skills

awsterraformansiblepythonpowershellgit

Required Languages

🇬🇧 English

Key Responsibilities

Design and implement enterprise storage and data protection services in AWS, including S3, EBS, EFS, FSx, and AWS Backup.

Develop Infrastructure-as-Code with tools such as Terraform, CloudFormation, or AWS CDK to automate backup, recovery, storage provisioning, and cyber resiliency workflows.

Build repeatable automation for provisioning, configuration management, monitoring, reporting, and policy enforcement.

Align cloud storage platforms with enterprise standards, operational procedures, security controls, and regulatory and compliance requirements.

Strengthen cyber resiliency with immutable backups, vault lock, cross-account and cross-region replication, and tested recovery procedures.

Implement monitoring and reporting for backup success, capacity, cost, and compliance posture.

Create and maintain documentation, including runbooks, architecture diagrams, and standard operating procedures.

Collaborate with cloud, security, application, and operations teams to deliver secure and scalable storage solutions.

Take part in continuous improvement efforts, incident response, root cause analysis, and patching and maintenance cycles.

Required Qualifications

Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture

3+ years of experience in infrastructure, storage, or cloud engineering.

Hands-on experience with AWS storage and data protection services, such as S3, EBS, EFS, FSx, AWS Backup, and Glacier.

Proficiency with IaC tools such as Terraform, Ansible, CloudFormation, or AWS CDK.

Scripting or programming experience in Python, PowerShell, or Bash.

Understanding of backup and recovery concepts, including RPO/RTO, retention, replication, and disaster recovery.

Familiarity with security controls such as IAM, KMS encryption, and least-privilege access.

Experience with version control (Git) and CI/CD pipelines.

Preferred Qualifications

AWS certifications, such as Solutions Architect, SysOps Administrator, or DevOps Engineer.

Experience with enterprise backup platforms, such as Commvault, Rubrik, Cohesity, or Veeam, in hybrid or cloud environments.

Knowledge of cyber resiliency practices, such as air-gapped and immutable backups and ransomware recovery.

Experience with compliance frameworks, such as SOX, PCI-DSS, NIST, or FFIEC.

Familiarity with configuration management tools, such as Ansible, and policy-as-code tools, such as AWS Config, Service Control Policies (SCPs), or OPA.