Comcast Cybersecurity: Cryptography Cyber Security Engineer

Comcast • Philadelphia, PA

1d • Onsite

About The Position

Comcast Cybersecurity is seeking a Cryptography Cyber Security Engineer to join their team. This role is part of an ongoing PKI/Certificate Management program, focusing on automating certificate management and integrating Sky infrastructure with the Comcast/Sky PKI managed service. The position offers an exciting opportunity to work within the Cyber Security team, delivering a wide variety of security capabilities to protect a complex and evolving environment. The engineer will be responsible for supporting cryptographic services and certificate management processes, protecting sensitive data through encryption, certificate lifecycle management, and key management services. They will identify cryptographic weaknesses and vulnerabilities, analyze certificate usage and encryption implementations, and conduct assessments of PKI environments. The role involves resolving complex operational issues, contributing to automation and tooling for certificate lifecycle management, and working with moderate guidance.

Requirements

• Hands on experience of PKI systems and services, ACME protocol, use of RESTful APIs.
• Experience with Certificate Authority Administration, ADCS monitoring, and related tasks
• Understanding in PKI machine identity technologies such as SSH, SSL, TLS
• Experience supporting Key Management Systems (KMS) for cryptographic key security.
• A good knowledge and understanding of Information and/or Cyber Security.
• Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business.
• Knowledge of cybersecurity principles and practices and an understanding of security frameworks e.g., NIST, ISO27001.
• Hands on experience with PKI and Certificate deployment/automation and Thales HSMs
• Good problem-solver, with the ability to tackle multiple tasks simultaneously.
• Being organized and diligent in using time and work management tools.
• A self-starter that is keen to get involved in teamwork, has strong interpersonal skills, and is hard-working and flexible.
• Open mind to learn new technologies, ability to analyze technical workflows and identify weak spots from cyber-security and operational point of views.
• Invested in a culture to self-learn and grow additional skillsets.
• Be curious to learn and share learnings and knowledge with the wider team.
• Employees at all levels are expected to: Understand our Operating Principles; make them the guidelines for how you do your job.
• Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services.
• Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences.
• Win as a team - make big things happen by working together and being open to new ideas.
• Drive results and growth.
• Support a culture of inclusion in how you work and lead.
• Do what's right for each other, our customers, investors, and our communities.

Nice To Haves

• Relevant Work Experience 2-5 Years

Responsibilities

• Performs onboarding of systems and services to xPKI platforms in line with defined SLAs.
• Provides cryptography guidance and support to engineering and business teams.
• Produces and reports metrics related to certificate management and cryptographic services, ensuring alignment to organizational commitments.
• Supports and maintains PKI solutions and environments across the enterprise.
• Analyses the usage of certificates across business and infrastructure systems to identify risks and improvement opportunities.
• Maintains accurate certificate inventory and supports continuous improvement of asset visibility.
• Supports initiatives to prepare the organization for post-quantum cryptography (PQC).
• Works with vulnerability management and security assessment teams to prioritize onboarding and remediation activities.
• Implements and supports automation of certificate lifecycle management processes across internal and external services.
• Supports awareness and education initiatives related to certificate management and cryptographic best practices.
• Performs or supports key ceremonies, business continuity and disaster recovery (BCP/DR) activities, and other cryptography-related workstreams.
• Identifies opportunities for process improvements and automation across cryptographic services.
• Performs certificate lifecycle operations, including issuance, renewal, and revocation activities.
• Supports investigation and resolution of operational issues related to certificates, encryption, and key management.
• Educates stakeholders on cybersecurity best practices, including certificate lifecycle management and cryptographic controls.
• Familiarizes self with company goals and strategies in order to achieve short-term goals with resolution.
• Strives to achieve personal goals and those set forth by management.
• Consistent exercise of independent judgment and discretion in matters of significance.
• Regular, consistent and punctual attendance.
• Must be able to work variable schedule(s) as necessary.
• Other duties and responsibilities as assigned.

Benefits

• We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the benefits summary on our careers site for more details.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level