About The Company NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming platforms, bringing stories to life through our global theme park destinations, consumer products, and experiences. Our extensive portfolio includes renowned brands such as NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, as well as the four global television studios under the Universal Studio Group banner. Our industry-leading theme parks and experiences around the world, including Universal Orlando Resort and Universal Studios Hollywood, further exemplify our commitment to entertainment excellence. As a subsidiary of Comcast Corporation, NBCUniversal is dedicated to creating impactful content while fostering a culture of inclusivity, community service, and employee development. We strive to attract talented professionals committed to innovation and diversity, reflecting the world we serve. About The Role We are seeking a highly skilled Principal DevOps Engineer to lead the architecture and evolution of the platform that supports NBC’s broadcast production environments. As a senior technical leader within the NBC Production Application Engineering team, you will be responsible for designing a Kubernetes-native platform that automates cloud infrastructure provisioning, lifecycle management, and delivery at an enterprise scale. Your expertise will drive the development of a platform that leverages infrastructure-as-code, custom Kubernetes controllers, and GitOps workflows to orchestrate resources across complex multi-account AWS and hybrid cloud environments. This platform is critical for supporting live broadcast production, encompassing compute provisioning, dynamic software-defined networking, hybrid DNS models, remote Virtual Desktop Infrastructure (VDI), and robust configuration management via Puppet. You will play a pivotal role in shaping the technical vision, writing production-grade Go services, and establishing engineering standards that ensure reliability, security, and operational excellence. This role offers an exciting opportunity to work at the forefront of cloud-native technology, contribute to open-source projects, and mentor engineering teams to achieve innovative solutions that meet the demanding needs of live broadcast operations. Qualifications 10+ years of experience designing, building, and operating production infrastructure and cloud-native platforms at enterprise scale Proficiency in Go programming, including systems-level development and API server creation Deep expertise in Kubernetes internals, including CRD/XRD generation, controllers/operators, informers, admission webhooks, and RBAC Extensive experience with Crossplane, including developing custom providers and composite resources in Go Strong background in AWS multi-account architectures, VPC networking, IAM, STS, S3, Route 53, and related services Hands-on experience with GitOps tools such as Flux or ArgoCD for continuous delivery Proficiency with Puppet configuration management, including module development, PuppetDB, Hiera, and r10k Experience designing REST APIs with modern authentication mechanisms like OAuth/JWT Knowledge of security best practices, including least-privilege policies, cross-account IAM trust, and secrets management Experience with observability tools such as Grafana, Prometheus, Loki, and OpenTelemetry Working knowledge of relational databases like PostgreSQL, including schema design and query optimization Excellent problem-solving skills and ability to communicate complex technical concepts clearly to stakeholders

Responsibilities

Architect and lead the development of a Kubernetes-native platform modeling broadcast infrastructure as custom resources Design and implement automation for provisioning across multi-account AWS environments and on-premises control rooms using Crossplane and custom Go functions Develop and maintain production-grade Kubernetes controllers, operators, and internal APIs in Go Integrate external enterprise platforms such as NRCS, Venafi, and Infoblox into the control plane, managing resource lifecycles and workflows Lead the design of cloud networking, DNS strategies, and cross-account connectivity in hybrid environments, automating VPC topology and routing Collaborate with broadcast systems engineers, system integrators, and vendors to bridge hardware and infrastructure automation Establish engineering standards, write RFCs, and mentor team members to promote best practices in cloud-native development Own the security and access control architecture, including RBAC, resource identifiers, and identity integrations Drive continuous delivery using GitOps tools, ensuring reliable deployment pipelines and configuration management Design and implement observability and alerting stacks to ensure operational visibility and rapid incident response Oversee VDI integration, session authentication, credential management, and gateway routing for remote desktop solutions

Benefits

Competitive salary range of $180,000 - $230,000, bonus eligible Fully remote work environment, allowing flexibility and work-life balance Company-sponsored benefits including medical, dental, and vision insurance 401(k) retirement plan with company matching Paid time off and holiday leave Tuition reimbursement and professional development opportunities Access to exclusive discounts and entertainment perks Equal Opportunity We are proud to be an Equal Employment Opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or any other basis protected by federal, state, or local law.