Comcast Cybersecurity: Cryptography Cyber Security Engineer

About the role

The Group Core Cyber Security team at Comcast Cybersecurity is seeking an experienced Cryptography Cyber Security Engineer to join an ongoing PKI/Certificate Management programme. The role involves working with internal teams across Sky to automate certificate management and with Comcast PKI team to integrate Sky infrastructure to the Comcast/Sky PKI managed service. This role requires expertise in cryptographic services, certificate management processes, and PKI environments.

Responsibilities

• Performs onboarding of systems and services to xPKI platforms in line with defined SLAs.
• Provides cryptography guidance and support to engineering and business teams.
• Produces and reports metrics related to certificate management and cryptographic services, ensuring alignment to organizational commitments.
• Supports and maintains PKI solutions and environments across the enterprise.
• Analyses the usage of certificates across business and infrastructure systems to identify risks and improvement opportunities.
• Maintains accurate certificate inventory and supports continuous improvement of asset visibility.
• Supports initiatives to prepare the organization for post-quantum cryptography (PQC).
• Works with vulnerability management and security assessment teams to prioritize onboarding and remediation activities.
• Implements and supports automation of certificate lifecycle management processes across internal and external services.
• Supports awareness and education initiatives related to certificate management and cryptographic best practices.
• Performs or supports key ceremonies, business continuity and disaster recovery (BCP/DR) activities, and other cryptography-related workstreams.
• Identifies opportunities for process improvements and automation across cryptographic services.
• Performs certificate lifecycle operations, including issuance, renewal, and revocation activities.
• Supports investigation and resolution of operational issues related to certificates, encryption, and key management.
• Educates stakeholders on cybersecurity best practices, including certificate lifecycle management and cryptographic controls.

Requirements

• Hands on experience of PKI systems and services, ACME protocol, use of RESTful APIs.
• Experience with Certificate Authority Administration, ADCS monitoring, and related tasks.
• Understanding in PKI machine identity technologies such as SSH, SSL, TLS.
• Experience supporting Key Management Systems (KMS) for cryptographic key security.
• A good knowledge and understanding of Information and/or Cyber Security.
• Good written and verbal communication skills to liaise with stakeholders at varying levels of seniority across the business.
• Knowledge of cybersecurity principles and practices and an understanding of security frameworks e.g., NIST, ISO27001.
• Hands on experience with PKI and Certificate deployment/automation and Thales HSMs.
• Good problem-solver, with the ability to tackle multiple tasks simultaneously.
• Being organized and diligent in using time and work management tools.
• A self-starter that is keen to get involved in teamwork, has strong interpersonal skills, and is hard-working and flexible.
• Open mind to learn new technologies, ability to analyze technical workflows and identify weak spots from cyber-security and operational point of views.
• Invested in a culture to self-learn and grow additional skillsets.

Qualifications

Requires a Bachelor's Degree and 2-5 years of relevant work experience.