Overview
M&T Bank is seeking an experienced OpenShift Platform Engineer to help design, operate, secure, and continuously improve its enterprise container platform. This senior individual-contributor role is responsible for complex platform[1]engineering initiatives across OpenShift and hybrid-cloud environments, including cluster lifecycle management, automation, reliability, security, observability, and developer enablement. The engineer will independently lead technical work from design through production implementation, troubleshoot complex cross-domain problems, establish reusable engineering standards, and mentor other engineers. The successful candidate will combine deep OpenShift or Kubernetes experience with strong Linux, networking, storage, automation, cloud, security, and communication skills.
Primary Responsibilities
Architect, deploy, upgrade, scale, and support production OpenShift clusters across hybrid infrastructure.
Lead complex platform initiatives independently from technical design and risk assessment through implementation, validation, documentation, and operational transition.
Automate cluster provisioning, configuration, upgrades, policy enforcement, and operational tasks through reusable infrastructure-as-code, configuration-management, GitOps, and CI/CD practices.
Diagnose and resolve complex issues involving Kubernetes, Linux, containers, networking, ingress, DNS, certificates, storage, compute, identity, and application connectivity.
Establish monitoring, alerting, health checks, operational dashboards, capacity-planning practices, and performance improvements that strengthen platform reliability.
Coordinate incident response and root-cause analysis, then implement and validate corrective and preventive actions.
Strengthen platform resiliency through tested backup, recovery, and disaster-recovery capabilities.
Enforce least-privilege access, OpenShift and Kubernetes RBAC, workload security controls, secrets and certificate practices, platform policies, and create audit-ready documentation.
Collaborate with cybersecurity, risk, and control teams to assess platform changes, remediate vulnerabilities and configuration findings, and satisfy applicable control requirements.
Assess emerging technologies and recommend adoption based on security, resilience, supportability, operational complexity, cost, and business value.
Deliver secure self-service capabilities, reference configurations, and reusable patterns that streamline application onboarding and improve the developer experience.
Engage application, cloud, network, storage, security, support, and vendor teams to deliver platform capabilities and resolve cross-domain issues.
Define platform standards, reference architectures, operational procedures, technical designs, and support documentation.
Mentor engineers and review peer-created technical designs, automation, documentation, and production changes.
Present technical options, tradeoffs, risks, and recommendations clearly to stakeholders across technical and management levels.
Champion engineering, change-management, IT service-management, security, risk, and regulatory practices applicable to the Bank.
Contribute to an on-call support rotation.
Education and Experience Required
Combined minimum of 8 years’ higher education and/or work experience in systems design, management and/or architecture
Strong understanding of the system development and infrastructure lifecycle and architecture, vendor best practices, IT Service Management, and systems design
Demonstrated proficiency administering and supporting production OpenShift or Kubernetes environments.
Strong troubleshooting experience across Linux, containers, networking, storage, compute, identity, and distributed application platforms.
Hands-on experience automating infrastructure or platform operations using scripting, configuration management, infrastructure as code, GitOps, or CI/CD practices.
Working knowledge of Git-based development, peer…