Network Engineer 4

Comcast brings together the best in media and technology. We drive innovation to create the worlds best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast.

Job Summary

The Senior Security Engineer is responsible for designing, implementing, and maintaining secure, highly available network and security infrastructure that supports enterprise, data center, and application services. This role focuses on network security, load balancing, firewall management, routing and switching, operational excellence, and automation to ensure the stability, performance, and protection of critical business services

Job Description

Key Responsibilities

1. Security Architecture & Design

• Design and maintain secure network and security architectures across enterprise and data center environments.
• Develop scalable and resilient solutions utilizing industry best practices for network segmentation, redundancy, and traffic protection.
• Participate in security reviews and architecture discussions for new applications and infrastructure deployments.

2. Firewall & Security Operations

• Deploy, configure, and support in Fortinet, F5 and Paloalto Firewalls and other security platforms across multiple locations.
• Manage security policies, NAT configurations, and access controls.
• Perform security assessments, policy reviews, and firewall rule lifecycle management.

3. Load Balancing & Application Delivery

• Provide administration, design, implement, troubleshooting, and operational support for F5 Load Balancers (LTM/GTM/DNS).
• Configure and maintain virtual servers, pools, health monitors, SSL offloading, persistence profiles, and traffic management policies.
• Support application migration, disaster recovery, and high-availability load-balancing solutions.

4. Routing & Switching

• Implement, troubleshoot and support enterprise and data center routing and switching infrastructure.
• Troubleshoot complex Layer 2 and Layer 3 networking issues.
• Manage routing protocols and technologies including:
  • BGP, OSPF, VRF, Multicast (PIM/IGMP)
  • STP, HSRP/VRRP, Port-Channel/LACP, MLAG/vPC

5. Monitoring & Incident Response

• Utilize monitoring and observability tools to proactively identify and resolve network and security issues.
• Participate in incident management and major outage troubleshooting activities.
• Perform root cause analysis and implement preventive measures.

6. Collaboration & Stakeholder Engagement

• Work closely with application, cloud, server, and infrastructure teams to deliver secure and reliable solutions.
• Provide technical guidance and support during maintenance activities, migrations, and change implementations.
• Coordinate with vendors and service providers for issue resolution and escalations.

7. Documentation & Compliance

• Create and maintain technical documentation, standard operating procedures (SOPs), security standards, and runbooks.
• Ensure adherence to organizational security policies, regulatory requirements, and industry best practices.
• Support audit and compliance initiatives.

8. Automation & Continuous Improvement

• Possess a basic understanding of network and security automation concepts.
• Utilize scripting and automation tools such as Python, Ansible, Git, or APIs to improve operational efficiency.
• Contribute to automation initiatives for configuration validation, reporting, monitoring, and routine operational tasks.

Experience

• 10 years of experience in Network Security, Data Center, or Enterprise Infrastructure environments.
• Strong hands-on experience with:
  • F5 Load Balancers (LTM/GTM/DNS)
  • Fortinet Firewalls
  • Routing & Switching technologies
• Proven experience in firewall policy management, NAT and security operations.
• Understanding of Layer 2 and Layer 3 technologies and routing protocols.
• Experience troubleshooting complex network and security incidents in production environments.
• Basic understanding of automation and scripting using Python, Ansible, REST APIs, or similar technologies.
• Experience supporting high-availability and disaster recovery environments.

Certifications (Preferred)

• Fortinet NSE / FCP Certification
• F5 Certified BIG-IP Administrator (101/201)
• CCNA / CCNP Security or equivalent

Core Competencies

• Strong troubleshooting and analytical skills.
• Expertise in security operations, firewall management, and application delivery technologies.
• Ability to independently manage complex projects and incident resolutions.
• Strong communication, documentation, and stakeholder management skills.
• Commitment to operational excellence, continuous improvement, and automation adoption.
• Ability to mentor junior engineers and contribute to team development.

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the benefits summary on our careers site for more details.

Education

Bachelors Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Certifications (if applicable)

Relevant Work Experience

7-10 Years

Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.

---