HonorHer Jobs


Job Information

M&T Bank Senior Network Engineer ISE in Buffalo, New York

This role offers a hybrid work schedule; offering the flexibility to work from home two days a week, while providing the opportunity for in-person collaboration.


This Engineer would be responsible for engineering, implementing, troubleshooting, and maintaining the various components that make up M&T Bank’s Network Access Control (NAC) infrastructure. This includes a Cisco Identity Service Engine (ISE) environment and the associated 802.1x network components for wired, wireless, and remote access networks. Additional expertise is desired in the specific technologies that are used in the environment to maintain network security and identity management to include Cisco’s Cisco Secure Network Analytics platform (Stealthwatch). This includes maintaining documentation to reflect the current operating environments as well as creating operational documentation to reflect current processes and best practices.

The ideal candidate will have:

  • Knowledge of Network Security Principles

  • Understanding of end user security and authentication

  • Knowledge of the Zero Trust Model

  • Understanding of Network Protocols and Designs

  • Understanding of TACACS+ & RADIUS protocols

  • Technical writing and documentation skills

  • Ability to analyze data and draw conclusions from analysis

  • Ability to work independently and as part of a team

Education and Experience Required:

  • Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture

  • Strong understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design

Education and Experience Preferred:

  • Experience with administering and maintaining a Network Access Control (NAC) solution utilizing Cisco's Identity Service Engine (ISE). Experience with similar solutions such as Aruba ClearPass, Forescout PacketFence, or Fortinet FortiNAC will also be considered.

  • Experience with using a Network Access Control (NAC) solution such as the Cisco ISE platform or a similar product to enforce endpoint compliance in an 802.1x environment for wired and wireless infrastructures and remote access solutions (VPN) to include device profiling, posturing and client provisioning.

  • Experience with administering and maintaining Cisco’s Cisco Secure Network Analytics platform (Stealthwatch) and integration with Cisco's Identity Service Engine (ISE).

  • Ability to build and analyze Network Access Control rules to comply with network security policies.

  • Expertise with IEEE 802.1x

  • Experience with 802.1X supplicants - Cisco AnyConnect & Windows Native 802.1x supplicant

  • Understanding of or experience working with Microsoft Private Key Infrastructure (PKI) / Certificate Authority

  • Ability to provide knowledge transfer and informal training to clients and co-workers

  • Experience with wireless (WLAN) and Wireless LAN Controllers (WLC)

  • Experience with network switching technologies.

  • Cisco certification in Security and or Route/Switch a plus.

  • Ability to demonstrate organized and detail-oriented methodologies.

  • Deployment experience with Cisco Adaptive Security Appliance (ASA) for remote access.

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $110,635.01 - $184,391.68 Annual (USD). The successful candidate’s particular combination of knowledge, skills, and experience will inform their specific compensation.


Buffalo, New York, United States of America

M&T Bank Corporation is an Equal Opportunity/Affirmative Action Employer, including disabilities and veterans.