Comcast Cybersecurity: Cryptography Cyber Security Engineer

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide.

Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace.

Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.) Job Summary Our products, platforms and technologies are constantly evolving that’s why keeping Sky safe from cyber-attacks is one of our top priorities.

Our Cyber Security team helps the business grow while protecting our customers, colleagues, and partners from increasingly sophisticated cyber threats. Whilst primarily working with our technology and engineering teams you will be expected to work with our wider teams across the UK, Italy, and Germany and participate in joint projects between Sky and Comcast.

Join us and you’ll get involved in tackling challenges and future threats in an ever-changing cyber landscape. The Group Core Cyber Security team currently has a role for an experienced individual to join an ongoing PKI/ Certificate Management programme.

You will work with internal teams across Sky to automate certificate management as well as with Comcast PKI team to integrate Sky infrastructure to the Comcast/Sky PKI managed service. This role is an exciting opportunity to join us on our journey, working within our Cyber Security team who are focused on delivering a wide variety of security capabilities to protect, and secure, a complex and ever-evolving environment.

Responsible for supporting cryptographic services and certificate management processes across the organization. Supports the protection of sensitive data through secure encryption, certificate lifecycle management, and key management services.

Identifies cryptographic weaknesses and vulnerabilities; performs analysis of certificate usage and encryption implementations across systems and platforms. Conducts assessments of PKI environments, certificate inventories, and cryptographic services.

Identifies gaps in certificate lifecycle management and trust chains. Evaluates system configurations related to certificates, keys, and encryption. Performs root cause analysis on cryptographic issues and supports remediation. Resolves complex certificate, PKI, and cryptographic operational issues.

Contributes to the design, development, and implementation of automation and tooling to support certificate lifecycle management and cryptographic services across enterprise environments. Works with moderate guidance in own area of knowledge.

Job Description This position is ineligible for visa sponsorship. To be considered for this role, you must be legally authorized to work in the United States and not require sponsorship for employment now or in the future. We are hiring for 2 open, identical positions.

Core Responsibilities: Performs onboarding of systems and services to xPKI platforms in line with defined SLAs. Provides cryptography guidance and support to engineering and business teams. Produces and reports metrics related to certificate management and cryptographic services, ensuring alignment to organizational commitments.

Supports and maintains PKI solutions and environments across the enterprise. Analyses the usage of certificates across business and infrastructure systems to identify risks and improvement opportunities. Maintains accurate certificate inventory and supports continuous improvement of asset visibility.

Supports initiatives to prepare the organization for post-quantum cryptography (PQC). Works with vulnerability management and security assessment teams to prioritize onboarding and remediation activities. Implements and supports automation of certificate lifecycle management processes across internal and external services.

Supports awareness and education initiatives related to certificate management and cryptographic best practices. Performs or supports key ceremonies, business continuity and disaster recovery (BCP/DR) activities, and other cryptography-related workstreams.

Identifies opportunities for process improvements and automation across cryptographic services. Performs certificate lifecycle operations, including issuance, renewal, and revocation activities. Supports investigation and resolution of operational issues related to certificates, encryption, and key management.

Educates stakeholders on cybersecurity best practices, including certificate lifecycle management and cryptographic controls. Familiarizes self with company goals and strategies in order to achieve short-term goals with resolution. Strives to achieve personal goals and those set forth by management.

Consistent exercise of independent judgment and discretion in matters of significance. Regular, consistent and punctual attendance. Must be able to work variable schedule(s) as necessary. Other duties and responsibilities as assigned