PKI Engineer (Venafi)

Universal City, CALIFORNIA, United States

Applications have closed

Company Description

NBCUniversal owns and operates over 20 different businesses across 30 countries including a valuable portfolio of news and entertainment television networks, a premier motion picture company, significant television production operations, a leading television stations group, world-renowned theme parks and a premium ad-supported streaming service.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. We strive to foster a diverse and inclusive culture where our employees feel supported, embraced and heard. We believe that our workforce should represent the communities we live in, so that together, we can continue to create and deliver content that reflects the current and ever-changing face of the world. Click here to learn more about Comcast NBCUniversal’s commitment and how we are making an impact.

Job Description

Here you can create world class Certificate Services, as part of the Cyber Security Crypto Services team.  This is an exciting time to join the team, as we stand up new and improved services to support the entire NBCUniversal enterprise.

The PKI Engineer will have the following responsibilities:

  • Maintain and sustain the PKI ecosystem and technical integrations with other solutions
  • Maintain the PKI infrastructure via vendor and server software updates and patches
  • Create actionable and meaningful metrics to provide to leadership
  • Provide advanced technical to support L1 operations team in troubleshooting problems and determine root cause analysis
  • Partner with application owners to understand business certificate requirements to develop a technical solution
  • Identify technical areas for service improvement
  • Champion change management activities
  • Write and maintain technical service and end user documentation


  • Solid experience managing, configuring, and supporting PKI
  • Experience implementing or managing Certificate Lifecycle Management for a variety of certificate use cases (TLS, User Authentication, Machine Authentication, Code Signing, S/MIME, and SSH)
  • Experience with certificate management tools (Venafi, Entrust, DigiCert, Microsoft)
  • Strong communication and interpersonal skills
  • Self-starter with the ability to manage multiple engineering tasks, while maintaining complete documentation
  • Bachelor’s degree in Computer Science, Cybersecurity, or equivalent experience

Desired Characteristics

  • Venafi Certified Administrator
  • Training in Cyber Security specific disciplines
  • Strong Collaborative Player – collaborates well with cross functional teams to solve problems and actively incorporates input from various Cyber Security teams and application owners
  • Experience with AWS or Azure certificate management
  • Understanding of DevOps basic principles
  • Scripting or programming experience, including REST APIs
  • Experience with ServiceNow and Jira a plus


• Must submit an attestation disclosing your COVID-19 vaccination status and, if partially or fully vaccinated, submitting your vaccination record no later than 7 days following commencement of employment.
• Must be fully vaccinated against COVID-19 at the commencement of employment or adhere to enhanced protocols in select work settings or where jurisdictionally mandated.
• Must be willing to adhere to all Company COVID-19 workplace safety policies and protocols.

This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. 

Salary range: $113,000 - 147,000

Additional Information

NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. NBCUniversal will consider for employment qualified applicants with criminal histories in a manner consistent with relevant legal requirements, including the City of Los Angeles Fair Chance Initiative For Hiring Ordinance, where applicable.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access as a result of your disability. You can request reasonable accommodations in the US by calling 1-818-777-4107 and in the UK by calling +44 2036185726.

Tags: APIs AWS Azure Certificate management CISSP Computer Science Crypto DevOps Jira PKI Scripting SSH TLS

Perks/benefits: Health care Insurance Medical leave

Region: North America
Country: United States
Job stats:  3  0  0

More jobs like this

Explore more InfoSec/Cybersecurity career opportunities

Find open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Analysis, Cryptography, Digital Forensics and Cyber Security in general, filtered by job title or popular skill, toolset and products used.