Cybersecurity: Cryptography Cyber Security Engineer

Join Comcast's Cyber Security Team

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace.

Join us. You'll do the best work of your career right here at Comcast.

Our products, platforms and technologies are constantly evolving that's why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues, and partners from increasingly sophisticated cyber threats. Whilst primarily working with our technology and engineering teams you will be expected to work with our wider teams across the UK, Italy, and Germany and participate in joint projects between Sky and Comcast.

Join us and you'll get involved in tackling challenges and future threats in an ever-changing cyber landscape. The Group Core Cyber Security team currently has a role for an experienced individual to join an ongoing PKI/ Certificate Management programme. You will work with internal teams across Sky to automate certificate management as well as with Comcast PKI team to integrate Sky infrastructure to the Comcast/Sky PKI managed service.

This role is an exciting opportunity to join us on our journey, working within our Cyber Security team who are focused on delivering a wide variety of security capabilities to protect, and secure, a complex and ever-evolving environment.

Responsible for supporting cryptographic services and certificate management processes across the organization. Supports the protection of sensitive data through secure encryption, certificate lifecycle management, and key management services. Identifies cryptographic weaknesses and vulnerabilities; performs analysis of certificate usage and encryption implementations across systems and platforms. Conducts assessments of PKI environments, certificate inventories, and cryptographic services. Identifies gaps in certificate lifecycle management and trust chains.

Evaluates system configurations related to certificates, keys, and encryption. Performs root cause analysis on cryptographic issues and supports remediation. Resolves complex certificate, PKI, and cryptographic operational issues. Contributes to the design, development, and implementation of automation and tooling to support certificate lifecycle management and cryptographic services across enterprise environments. Works with moderate guidance in own area of knowledge.

Core Responsibilities:

• Performs onboarding of systems and services to xPKI platforms in line with defined SLAs.
• Provides cryptography guidance and support to engineering and business teams.
• Produces and reports metrics related to certificate management and cryptographic services, ensuring alignment to organizational commitments.
• Supports and maintains PKI solutions and environments across the enterprise.
• Analyses the usage of certificates across business and infrastructure systems to identify risks and improvement opportunities.
• Maintains accurate certificate inventory and supports continuous improvement of asset visibility.
• Supports initiatives to prepare the organization for post-quantum cryptography (PQC).
• Works with vulnerability management and security assessment teams to prioritize onboarding and remediation activities.
• Implements and supports automation of certificate lifecycle management processes across internal and external services.
• Supports awareness and education initiatives related to certificate management and cryptographic best practices.
• Performs or supports key ceremonies, business continuity and disaster recovery (BCP/DR) activities, and other cryptography-related work streams.
• Identifies opportunities for process improvements and automation across cryptographic…