Staff Cyber Systems Architect

Company Description
NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.
Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.
Comcast NBCUniversal has announced its intent to create a new publicly traded company ('Versant') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.
Job Description
Join NBCUniversal Cyber Security and help us design and implement DNS and related network security services that enable and protect the experience of our businesses. This role is a part of the Cyber Security Architecture and Engineering team, responsible for security technology that supports the entire NBCUniversal enterprise. You'll be responsible for design and planning of DNS and related network security services that provide visibility and defend the network at all layers.
You'll:
• Create new systems and practices to support highly-available, reliable, and secure DNS services in a complex on-prem, hybrid, and multi-cloud estate.
• Architect systems consisting of COTS and custom-developed components where necessary to meet the unique needs of NBCUniversal.
• Create a roadmap for reliability and performance that can stand the test of time with appropriate metrics and observability.
• Prototype and build systems in cloud that seamlessly provide service to engineering teams and integrate with their preferred stacks
• Work with development teams to design automation of self-service and repeatable DNS functions integrating with APIs and existing enterprise workflow systems.
• Work closely with the NBC Universal Cyber Defense Organization to glean valuable information security insights from DNS activity and other log data.
• Work to improve adjacent network services like DHCP, IPAM, Cloud Security and infrastructure orchestration.
• Improve namespace design and utilization by creating logical domain and DNS zone standards.
• Serve as an escalation point for DNS service-related incidents and a resource for information security incidents where DNS data or configuration is useful in the incident response process.
Qualifications
• A deep understanding network security principles and how to apply them in the DDI space.
• Minimum 5 years' experience designing and implementing Infoblox DDI in large enterprises with a complex networks.
• Experience integrating corporate DNS (and other DDI) services with cloud DNS like Route 53 and Azure DNS.
• Experience tuning 3rd party recursive DNS service security features to reduce false positives and meet the needs of the business.
• Experience migrating DNS services to or from Microsoft DNS and expert knowledge of how that impacts an Active Directory domain.
• An understanding of how to utilize the Infoblox API to configure, manage or pull data from a grid.
• Ability to read and write basic logic in any scripting or programming language to manipulate data or communicate with an API.
• A thirst for improvement and an inclination to thoughtfully challenge the status quo.
• Desire to try things and iterate on them, fail fast, and focus on functionality that matters.
• Leverage data to drive design and risk decisions using various sources and basic analytics to create clear metrics and reports.
Desired Characteristics:
• Experience managing security services or infrastructure in the media and entertainment industry.
• Experience working with brand reputation services and leveraging external domain management.
• Firm knowledge of ITSM tools and processes with a clear vision on how to apply service management principles to DNS.
• A clear understanding of securing infrastructure in AWS, Azure or Google Cloud
Additional Requirements:

• Fully Remote: This position has been designated as fully remote, meaning that the position is expected to contribute from a non-Versant worksite, most commonly an employee's residence.

This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website.
Salary range: $130,000 - $160,000 (bonus eligible).
We are accepting applications for this position on an ongoing basis.
Additional Information
As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.
If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing [email protected].
For LA County and City Residents Only: NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.