Staff DevSecOps Engineer (Azure)

Company Description

We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. Our Diversity, Equity and Inclusion initiatives, coupled with our Corporate Social Responsibility work, is informed by our employees, audiences, park guests and the communities in which we live. We strive to foster a diverse, equitable and inclusive culture where our employees feel supported, embraced and heard. Together, we’ll continue to create and deliver content that reflects the current and ever-changing face of the world.

Job Description

The Staff DevSecOps Engineer (Azure) role will be used to develop custom solutions using various code methods for Identity and Entitlement management in the Azure space. The Staff DevSecOps Engineer (Azure) will be responsible for working on solutions for Azure AD and B2C development, as well as assist with other development needs as required to support NBCUniversal’s emerging business and technology needs. The Staff DevSecOps Engineer (Azure) will be part of the IAM Software Development team who are working together to drive our strategies to the cloud. This position reports to the Sr. Director of IAM Software Development and will work in close collaboration with the CISO's direct reports, other lead architects, and engineers within the NBCUniversal business areas.

Responsibilities:

• Architect and author Microsoft Azure Solutions across multiple platforms. 
• Design and Implement Microsoft Entra ID related projects. 
• Create and maintain Reference Architecture documentation
• Document of new solutions (e.g., architecture, configuration, setup, and support WIKIs). 
• Working within a project management/agile delivery methodology in a leading role as part of a multi-disciplined software development team. 
• Collaborate with NBCUniversal customer stakeholders and end users in the software development lifecycle.
• Provide effective knowledge transfer and training to relevant support teams to ensure a smooth transfer of operations. 
• Work closely with key security, technology, and business groups to implement approved designs and features. 
• Work with approved vendors on solutions or enhancements to current products
• Provide technical leadership for Azure development projects.
• Participate in long range strategic planning and capitol budgeting proposals.
• Create and maintain Standard Operating Procedures.
• Play a leading role in future growth using AI solutions.

Qualifications

Basic Requirements:

• Bachelor’s Degree in Computer Science, Information Security, Management Information Systems, or equivalent work experience acceptable
• 8+ years of proven work history providing solution within Entra ID. Expert knowledge of application integrations, conditional access polices, Entra ID Connect.
• Possession of an Azure Solution Architect or equivalent certification.
• Experience with XML, .NET, REST and object-oriented programming languages like C# or Java, and Python.
• Expertise in scripting with a shell tool (Ex: PowerShell, AZCLI, etc.)
• Experience with front end technologies, HTML, CSS, Angular, JQuery, and JS.
• Prior experience with setting up, deploying, and managing multiple environments to support agile development approaches.
• Good understanding of coding best practices and modern architectural patterns.
• Hands-on experience with static code analysis and code security analysis tools such as SonarQube, SNYK, SonarLint, VeraCode, or Roselyn
• Extensive experience with a standard unit testing framework such as XUnit, Junit, NUnit, Moq, etc.
• Recent hands-on experience with a DevSecOps toolset.
• Hand-on experience with selecting and implementing containerization technology and orchestrators such as Docker and Kubernetes.
• Strong, in-depth, and demonstrable hands-on experience with the following technologies: 
  • Microsoft Identity and Access Management products including Entra ID or AD B2C 
  • Microsoft Azure Operational and Monitoring tools, including Azure Monitor, App Insights and Log Analytics 
  • Microsoft Azure Platform as A Service (PaaS) products such as App Services, Logic Apps, Functions and other Serverless services.
  • Microsoft Graph
  • Azure Data Factory
  • Open Id Connect, OAuth 2 and SAML
  • Git, scripting, and deployment automation tools like ARM templates, Bicep, and Terraform.
  • A high overall level of familiarity with Microsoft Azure and its relevant build, deployment, automation, networking and security technologies in cloud and hybrid environments.
• Excellent employee service skills required. Always mindful of the ‘user experience’
• Strong interpersonal and communications skills with the capability to communicate effectively to non-technical decision-making Leaders is required
• Ability to explain and champion technical concepts to a broad audience focusing on business reasons to do so.
• Must be a strong self-starter with a future-minded approach to solutions design.
• Strong analytical and product management skills required, including a thorough understanding of how to interpret customer business needs and translate them into application and operational requirements
• A team player that can work with a diverse team and set of skills
• Work with staff and management across all levels of the organization

Additional Requirements:

• Fully Remote: This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence.

This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $130,000 - $160,000 (bonus eligible)

We are accepting applications for this position on an ongoing basis.

Additional Information

NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. NBCUniversal will consider for employment qualified applicants with criminal histories in a manner consistent with relevant legal requirements, including the City of Los Angeles Fair Chance Initiative For Hiring Ordinance, where applicable.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing AccessibilitySupport@nbcuni.com.