NBCUniversal
Overview
Join to apply for the
Engineer, PKI
role at
NBCUniversal Orlando, FL Company Description
NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world. Job Description
The Public Key Infrastructure (PKI) Engineer will be a key member of the new Versant Cyber organization and is responsible for designing, implementing, and maintaining the cryptographic infrastructure used to secure communications, authenticate identities, and protect data across digital systems. This role is foundational to enabling secure operations across cloud, hybrid, and on-prem environments and serves as a leader over the PKI discipline. Responsibilities
Manage enterprise Certificate Authorities (CAs), including Root and Intermediate CAs (internal and third-party). Maintain Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP) services. Oversee the issuance, renewal, and revocation of user, device, service, and application certificates. Implement certificate lifecycle automation to reduce manual errors and expiry risk. Promote, foster, and advocate for an environment of collaboration, diversity, and inclusion. Ensure systems adhere to industry best practices for encryption, signing, and key usage (e.g., RSA, ECC, SHA-2, TLS 1.2/1.3). Stay current with NIST guidelines, WebTrust requirements, and corporate cryptographic policies. Manage private key protection using Hardware Security Modules (HSMs), Trusted Platform Modules (TPMs), or cloud KMS. Ensure secure storage, usage, and backup of cryptographic materials. Investigate and remediate certificate-related outages or compromise scenarios (e.g., mass expiration, misissuance, stolen keys). Collaborate and drive productivity and effective integration with adjacent Versant Cyber functions and the security stack and technology platforms. Qualifications
Minimum 5 years experience in identity and access management (IAM), security engineering, or infrastructure roles, with a strong focus on PKI, cryptography frameworks, or certificate management. Experience with cryptographic algorithms like RSA, ECC, SHA-2, AES; hybrid post-quantum readiness is a plus. Experience managing PKI platforms such as Microsoft ADCS, Venafi, Keyfactor, DigiCert, AWS Certificate Manager, or HashiCorp Vault. Deep understanding of TLS/SSL, S/MIME, PGP, Code signing, and HTTPS. Experience supporting compliance for TLS/HTTPS, code signing, and encryption policies. Strong documentation skills for crypto policies, key ceremonies, and procedures. Ability to partner with teams across security, IT, DevOps, and application delivery. Experience providing direct support and input to business executives and taking a lead role in driving the organization’s strategic direction. Bachelor’s Degree in an IT related field and/or equivalent work experience. Desired Characteristics
Experience in multiple large complex environments, especially within Identity and/or Security Engineering components. Experience in identity, security engineering, and/or information security in the media and advanced technology industries. Master’s Degree in an IT related field. Additional Requirements
Fully Remote: This position is designated as fully remote, contributing from a non-Versant worksite (often the employee’s residence). This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Salary range: $105,000 - $135,000. We are accepting applications for this position on an ongoing basis. Additional Information
As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal’s equal employment opportunity statement applies to all applicants and employees without regard to protected characteristics. If you require accommodations during the application process due to a disability, you may request them by contacting AccessibilitySupport@nbcuni.com. Although you’ll be hired as an NBCU employee, your employment and the responsibilities associated with this job may transition to Versant in the future. By joining at this pivotal time, you’ll be part of this exciting company as it takes shape. Location: Orlando, FL
#J-18808-Ljbffr
Join to apply for the
Engineer, PKI
role at
NBCUniversal Orlando, FL Company Description
NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world. Job Description
The Public Key Infrastructure (PKI) Engineer will be a key member of the new Versant Cyber organization and is responsible for designing, implementing, and maintaining the cryptographic infrastructure used to secure communications, authenticate identities, and protect data across digital systems. This role is foundational to enabling secure operations across cloud, hybrid, and on-prem environments and serves as a leader over the PKI discipline. Responsibilities
Manage enterprise Certificate Authorities (CAs), including Root and Intermediate CAs (internal and third-party). Maintain Certificate Revocation Lists (CRLs) and Online Certificate Status Protocol (OCSP) services. Oversee the issuance, renewal, and revocation of user, device, service, and application certificates. Implement certificate lifecycle automation to reduce manual errors and expiry risk. Promote, foster, and advocate for an environment of collaboration, diversity, and inclusion. Ensure systems adhere to industry best practices for encryption, signing, and key usage (e.g., RSA, ECC, SHA-2, TLS 1.2/1.3). Stay current with NIST guidelines, WebTrust requirements, and corporate cryptographic policies. Manage private key protection using Hardware Security Modules (HSMs), Trusted Platform Modules (TPMs), or cloud KMS. Ensure secure storage, usage, and backup of cryptographic materials. Investigate and remediate certificate-related outages or compromise scenarios (e.g., mass expiration, misissuance, stolen keys). Collaborate and drive productivity and effective integration with adjacent Versant Cyber functions and the security stack and technology platforms. Qualifications
Minimum 5 years experience in identity and access management (IAM), security engineering, or infrastructure roles, with a strong focus on PKI, cryptography frameworks, or certificate management. Experience with cryptographic algorithms like RSA, ECC, SHA-2, AES; hybrid post-quantum readiness is a plus. Experience managing PKI platforms such as Microsoft ADCS, Venafi, Keyfactor, DigiCert, AWS Certificate Manager, or HashiCorp Vault. Deep understanding of TLS/SSL, S/MIME, PGP, Code signing, and HTTPS. Experience supporting compliance for TLS/HTTPS, code signing, and encryption policies. Strong documentation skills for crypto policies, key ceremonies, and procedures. Ability to partner with teams across security, IT, DevOps, and application delivery. Experience providing direct support and input to business executives and taking a lead role in driving the organization’s strategic direction. Bachelor’s Degree in an IT related field and/or equivalent work experience. Desired Characteristics
Experience in multiple large complex environments, especially within Identity and/or Security Engineering components. Experience in identity, security engineering, and/or information security in the media and advanced technology industries. Master’s Degree in an IT related field. Additional Requirements
Fully Remote: This position is designated as fully remote, contributing from a non-Versant worksite (often the employee’s residence). This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Salary range: $105,000 - $135,000. We are accepting applications for this position on an ongoing basis. Additional Information
As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal’s equal employment opportunity statement applies to all applicants and employees without regard to protected characteristics. If you require accommodations during the application process due to a disability, you may request them by contacting AccessibilitySupport@nbcuni.com. Although you’ll be hired as an NBCU employee, your employment and the responsibilities associated with this job may transition to Versant in the future. By joining at this pivotal time, you’ll be part of this exciting company as it takes shape. Location: Orlando, FL
#J-18808-Ljbffr