Comcast Cybersecurity: Network Security Engineer 3

Comcast’s Technology, Product & Experience organization works at the intersection of media and technology. Our innovative teams are continually developing and delivering products that transform the customer experience. From creating apps like TVGo to new features such as the Talking Guide on the X1 platform, we work every day to make a positive impact through innovation in the pursuit of building amazing products that are enjoyable, easy to use and accessible across all platforms. The team also develops and supports our evolving network architecture, including next-generation consumer systems and technologies, infrastructure and engineering, network integration and management tools, and technical standards. Because our employees are our most valuable asset, we offer a flexible working environment to balance the need to work independently wherever you choose, with days that require collaboration at one of our offices. Our roles primarily reside inside or around one of our Tech Hubs (Philadelphia and surrounding suburbs, Denver, Austin, Silicon Valley, Washington DC/N. Virginia). Job Summary Responsible for working with the Network and Systems Engineers to create, maintain and enforce security policies effecting the network. Responsible for securing all information and information systems assets of the Company network infrastructure. Design/install/operations of VPN, SoHo, WAF, IDS, DDoS, Partner Access Solutions, Network Security Stack powering Zero-Trust, Firewalls and microsegmentation protecting CCS operations infrastructure (SIEM, DataLake, WAF, IDS, SOC dashboards). Has in-depth experience, knowledge and skills in own discipline. Usually determines own work priorities. Acts as a resource for colleagues with less experience. Job Description Job Description Summary At Comcast, “The Customer Experience” is our first priority. The Network Security Engineer is an IT Professional, responsible for the design, engineering, implementation, advanced operations, and maintenance, of the company’s security solutions. This opportunity will have a strong focus on Remote Connectivity specifically VPN using the F5 suite of applications (APM, AFM). Advanced knowledge of the deployment architecture for these products will be a core responsibility. Must be able to understand Comcast’s various business entities and provide a sound knowledge of security techniques, latest protocols, and defenses against new threats, viruses, and other attacks. The ideal candidate would possess a thorough understanding and knowledge of the network, operating systems, network equipment, and networking protocols. The position will also be responsible for analyzing and troubleshooting performance issues, maintaining documentation, and mentoring other team members. The selected candidate would be working as part of a dynamic and fast-paced team! Core Responsibilities Lead efforts to analyze network security designs, engineer solutions to network elements, develop deployment strategies and update technical documentation Engineer solutions to VPN security requests in a timely manner while meeting business needs and maintaining network security and risk management policies. Responsible for analyzing new application data flows and designing VPNs that support application requirements. Responsible for analyzing VPN change requests and integrating changes into existing policies, while maintaining security standards. Responsible for analyzing requirements and designing VPNs that provide secure network connectivity to Partners and Vendors. Lead efforts to create new security designs based on current business needs, capacity increases, customer growth, directional platforms, and emerging technology releases. Lead forums and projects on the above and work with other Security, Business Partners, and Division teams to discuss and solicit feedback on the designs, standards, and implementation approaches related to VPNs. Provide technical leadership and guidance to other members of the Security team. Develop and maintain security documentation, architectural diagrams and standards documents, as required. Manage, maintain, and configure security network hardware (e.g., VPN devices, Logging Systems, etc.) Provide higher tier technical support to the Cyber Security Reliability Engineering teams with methodical approach to trouble resolution Respond quickly to critical severity situations in coordination with Incident Management team with focus getting to root cause on customer issues, including escalating and managing issues to respective vendor support teams High level of personal and professional integrity, with consistent exercise of independent judgment and discretion in matters of significance Acts as a resource for colleagues with less experience Regular, consistent, and punctual attendance. Must be able to work nights and weekends, variable schedule(s) and overtime as necessary Other duties and responsibilities as assigned Requirements: Understand LAN/WAN architectures and designs; mobile networking, and cloud networking Manage and harden vendor (F5) installation, configuration and backup, and restoration, including development and management of workflows and operating standards, including design reviews, certification, production acceptance, and testing for system commissioning Conduct complete system and application reviews and specify security review guidelines Develop and conduct security resilience testing and stress testing Provide strong process and procedure ownership for audit and control systems Understand Layer 2 Switching protocols as well as IPv6, LACP, and 802.1x Understand encryption protocols like SSL, TLS, and DTLS Understand routing protocols such as OSPF, BGP, and VRFs Working knowledge of vendor products such as F5 (AFM, APM, LTM, BIGIQ) Understand High-availability and Redundancy strategies Provide effective and meaningful operational and functional reports and metrics to management. Cross-train team members through informal workshops, coaching sessions, design reviews, and consumer use Must have experience with VPN technologies (IPSec/SSL VPNs) Operate inter-dependently with a diverse realm of personnel to draw expertise in problem-solving Maintain a sense of mission and focus on results that bring value to the customer The successful applicant will also have good communication skills, be self-motivated, organized, capable of working independently, and possess solid decision making and project management skills Employees at all levels are expected to: Understand our Operating Principles; make them the guidelines for how you do your job. Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services. Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences. Win as a team - make big things happen by working together and being open to new ideas. Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers. Drive results and growth. Respect and promote inclusion & diversity. Do what's right for each other, our customers, investors and our communities. Disclaimer: This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications. Comcast is an EOE/Veterans/Disabled/LGBT employer. Comcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other basis protected by applicable law. Education Bachelor's Degree While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience. Relevant Work Experience 5-7 Years Salary: National Pay Range: $62,016.38 USD-$145,350.90 USD Comcast intends to offer the selected candidate base pay within this range, dependent on job-related, non-discriminatory factors such as experience. Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details.