5 hours ago
Base Salary
$180k - $230k/yr
Responsibilities
- Architect a Kubernetes-native platform modeling broadcast infrastructure as custom resources across multi-account AWS and on-premises environments.
- Build and maintain production Kubernetes operators, controllers, internal APIs, and custom Crossplane providers in Go.
- Design cloud networking, DNS, cross-account connectivity, VPC topology, and dynamic routing for hybrid environments.
- Integrate broadcast systems, vendors, bare-metal compute, VDI solutions, enterprise platforms, and configuration-as-code workflows.
- Lead technical strategy, architectural decisions, RFCs, engineering standards, mentoring, CI/CD, testing, and GitHub Actions automation.
- Own hierarchical RBAC, authorization, identity integrations, resource identifiers, and fine-grained access controls.
- Drive GitOps continuous delivery, Puppet-based configuration management, observability, alerting, and operational excellence.
- Oversee VDI session authentication, credential management, and gateway routing integrations.
Requirements
- 10+ years of experience designing, building, and operating production infrastructure and cloud-native platforms at enterprise scale.
- Strong Go proficiency and experience building Kubernetes controllers and operators with controller-runtime and kubebuilder.
- Expert knowledge of Kubernetes internals, including CRDs, XRDs, operators, informers, admission webhooks, and RBAC.
- Deep production experience with Crossplane, composition functions, composite resources, and custom Crossplane providers in Go.
- Extensive AWS multi-account, cross-account networking, identity federation, and networking experience across EKS, EC2, VPC, IAM, STS, SSM, Secrets Manager, Route 53, and S3.
- Production experience with GitOps tooling such as Flux or ArgoCD for Kubernetes continuous delivery.
- Hands-on Puppet experience including module development, PuppetDB, Hiera, and r10k.
- Experience designing REST APIs, authentication systems using OAuth or JWT, IAM trust chains, least-privilege policies, and secrets abstractions.
- Strong observability experience with Grafana, Prometheus or Mimir, Loki, OpenTelemetry, and metrics collection agents.
- Working knowledge of relational databases such as PostgreSQL and SQLite, including schema design, migrations, and query optimization.
- Excellent problem-solving, documentation, executive communication, vendor engagement, and architectural presentation skills.
- Preferred qualifications include broadcast or media production experience, Kubernetes disaster recovery, VDI, PKI, hybrid DNS, software-defined networking, gateway technologies, testing frameworks, SOPS, local Kubernetes development, Bash, PowerShell, and open-source contributions.
Benefits
- Fully remote position performed from a non-NBCUniversal worksite, most commonly an employee residence.
- Company-sponsored medical, dental, and vision insurance, 401(k), paid leave, tuition reimbursement, discounts, and other perks.
Tech Stack
Categories
About NBC
NBCUniversal is a global media and entertainment company that produces and distributes film, television, news, sports, and streaming content for consumer audiences and advertisers. Its portfolio includes NBC, Telemundo, Universal Pictures, DreamWorks Animation, and Peacock, and it also operates Universal theme parks and consumer products licensing. Formed in 2004 and headquartered in New York City, it is a subsidiary of Comcast.