Comcast Cybersecurity: Principal Software Engineer

Profile

Comcast's Technology, Product & Experience organization works at the intersection of media and technology. Our innovative teams are continually developing and delivering products that transform the customer experience. From creating apps like TVGo to new features such as the Talking Guide on the X1 platform, we work every day to make a positive impact through innovation in the pursuit of building amazing products that are enjoyable, easy to use and accessible across all platforms. The team also develops and supports our evolving network architecture, including next-generation consumer systems and technologies, infrastructure and engineering, network integration and management tools, and technical standards. We offer a flexible working environment to balance the need to work independently wherever you choose, with days that require collaboration at one of our offices. Our roles primarily reside inside or around one of our Tech Hubs (Philadelphia and surrounding suburbs, Denver, Austin, Silicon Valley, Washington DC/N. Virginia). Some roles can work virtual full-time if they are not near a Tech Hub, but that is dependent upon the needs of the position and amount of collaboration required.

Job Summary

As Principal Software Engineer in the Integrated Security, Authorization, and Access Team (under Comcast Cyber Security Org), you will be responsible for a suite of tools that enable secure API access to services throughout Comcast. You'll help other teams with faster delivery of reliable, performant, and scalable software products. In addition to bringing your own software development expertise, you'll be working with and mentoring colleagues at all levels and helping us design and deliver next-generation platforms for successful projects. You'll be filling the role of principal engineer for one of the main stream projects ,a suite of services/products under each Enterprise vs Subscriber platform umbrella, mentoring developers, working with stakeholders to understand their requirements, and helping design and build new and improved systems to ensure service security - understanding emerging API security standards and thinking about how to secure our services today and into the future.

Job Description

The Project:

Xerxes offers highly reliable, scalable and secured Federated Authentication and Authorization platform for all Syndication Partners -across Enterprise and subscriber business domains for 135 multi-tenant applications/tools. Xerxes is an IDP agnostic service provider, Identity Broker/Token service that's fronted to provide access to all the Enterprise Business Users (Comcast and Syndication Tech support Teams access to the CARE Tools) and as well provide/control access of millions of Cable/Comcast Subscriber users to Subscriber facing applications like XFi, Stream, Sky and XH etc.

We're a supportive, collaborative team that believes in mentoring and supporting all our colleagues. We've adopted lightweight agile processes that we apply to improve the way we all work together.

Core Values:

We believe we can deliver excellent service and products without taking ourselves too seriously. It's okay to find joy and humor in our work.

We treat customers as collaborators rather than as tickets to be closed.

We value the curiosity to deeply understand other points of view; understanding more perspectives helps us make better decisions.

We value getting a usable and working solution in front of customers quickly to get feedback so we can iterate and refine over holding out for a perfect solution later.

We value leadership through service; we get ahead by helping others succeed.

We value mistakes as an opportunity to learn. We view all mistakes as owned by the team as a whole, and seek to learn and improve from the mistakes we make.

We value actively and humbly seeking honest feedback.

We value an open and transparent channel of communication with all members of the team, regardless of their title and expertise.

We value context and responsibility over management approval and supervision.

We value diversity of opinion over group consensus.

We value using good enough open source software over perfect commercial software.

We value attitude over aptitude; no genius jerks allowed.

We value making decisions with research and reason over tradition or fear; we are fans of the scientific method.

During technical discussions, no one has a title.

We value being able to pursue a plan together over everyone agreeing that the plan is the best one.

We happily teach others the things we have learned.

Responsibilities:

Designing and implementing the business /product features

Be the SME (Subject Matter Expert and the Go To person) for the product line/solutions.

Writing high quality production-ready application code.

Pairing and collaborating with peers.

Writing appropriate levels of documentation, API specifications.

Participating in joint design and architecture sessions.

Steering Solutions Technical & Security Architectural/Design strategy and enabling partners/apps teams/syndication partners stake holders

Ensuring high security posture across the solutions footprint

Building effective Continuous integration, near time Delivery & Deployment model with solid operations monitoring capabilities.

Establish operations excellency by reducing the MTTR and measuring the platform resiliency against the Error Budget

Ensuring timely remediations for keeping the platforms& apps secured.

An eye for strong automation and Toil reduction focus

Operating and supporting production environments (including on-call support).

Performing Design and code reviews.

Participating in software release and deployment activities.

Coordinating constructively with other team members and external teams.

Take lead/pride in supporting/guiding the internal/external stakeholders while integrating with the platform

Preferred qualifications.

10 years of relevant work experience, including extensive programming experience and mentoring skills.

We favor experience in multiple languages over expertise in any given language. However; in this role, experience in Java, Spring Boot, react.js, and node.js are most likely to be helpful to the team.

Database administration, self-management of DB operations a plus (PostgresSql/RDS).

Experience on a DevOps team working with OIDC/OAuth, AWS, Application monitoring, issue triaging will be very helpful in this role.

Security background in Federated AuthN & AuthZ.

UNIX/Linux background: facility with command command-line utilities; familiarity with system administration tools and concepts a plus.

Experience integrating Open Source tools and libraries to build complete solutions.

BS in Computer Science, Computer Engineering or related technical field or equivalent practical experience.

Experience developing service oriented architectures and an understanding of design for scalability, performance and reliability.

Experience with high-scale, distributed web service development (hands-on experience with RESTful/GraphQL API/web services).

Familiarity with distributed systems, asynchronous messaging, and network protocols, especially TLS and HTTP.

Familiarity with data serialization formats like XML, JSON and protocol buffers.

Education

High School Diploma / GED

Relevant Work Experience

10 Years

Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality - to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary (https://jobs.comcast.com/life-at-comcast/benefits) on our careers site for more details.

Company info

Comcast
Website : http://corporate.comcast.com