> Markdown version of [/jobs/ext/4383312-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/4383312-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Infrastructure Security Engineer

- **Company:** Nbcuniversal Media, LLC
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $80,000.0 - $100,000.0
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Application Firewall, Application Layers, JIRA, User Authentication, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Domain Name System Security Extensions, Domain Name System (DNS), Github, Network Security, Network Troubleshooting, Scrum Methodology, Ansible, Akamai, Software Engineering, Workflow Management Systems, Scripting, AWS Lambda, Firewalls (Computer Science), Git, Tanium Platform Expertise, Sender Policy Framework (SPF), Palo Alto Networks, Cloudflare, Bitbucket, Terraform
- **Published:** October 12, 2026
- **Apply:** https://www.manhattanjobs.com/job.asp?id=3449023981&tx=KP2525FFP&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* 2+ years of experience managing and troubleshooting Network Firewalls, Endpoint security and DNS security.
 * Solid understanding of network security principles and how to apply them.
 * Excellent problem-solving and troubleshooting skills with the ability to use various data collection tools and methodologies to analyze problems, determine root cause, and develop solutions.
 * Knowledge/hands-on experience with Cloudflare, Akamai or a similar web application firewall solutions.
 * A thirst for improvement and an inclination to thoughtfully challenge the status quo.
 * Desire to try things and iterate on them, fail fast, and focus on functionality that matters.
 * Ability to work independently, adapt quickly, and have a positive attitude., * Experience with CrowdStrike, Tanium, Airlock, or similar endpoint protection products.
 * Experience with development technologies: Git (Bitbucket or GitHub), Terraform, Ansible or AWS Lambda.
 * Experience with Email Authentication including ProofPoint and implementing of policies for SPF, DMARC, and DKIM.
 * Experience with Palo Alto Networks firewalls, highly segmented and transient networks, or extreme high-performance network environments such as broadcast or research networks.
 * Experience with project management/workflow tools and concepts such as Jira, Agile, Scrum/Kanban.
 * Comfortable with scripting or software development., If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing AccessibilitySupport@nbcuni.com.

## Description

This role is a part of the Infrastructure Security Engineering team responsible for the security technology that supports the entire NBCUniversal enterprise. You'll be responsible for both supporting and engineering infrastructure security services that provide visibility and defend the enterprise at all layers.

You'll:

 * Provide secure design and engineering guidance, support, and fulfill new business requests for security tools and services, including Endpoint, WAF, DNS, Email and Layer 7 firewalls.
 * Improve and innovate tooling utilized to manage security rule sets, ensuring that policies reflect the risk reduction goals of the organization.
 * Participate in and oversee the On-call rotation to provide off-hours support for critical systems, ensuring seamless incident response and mentoring junior staff on best practices.
 * Develop and implement automation strategies to streamline and simplify security policy administration, increasing efficiency and reducing human error.
 * Collaborate with cross-functional teams to integrate security protections into existing tools and environments, ensuring a holistic approach to security.
 * Leverage data using various sources and advanced analytics to create clear metrics and reports, providing insights into the performance and security posture of the enterprise.