Engineer/Senior Engineer, Firewall Location: TerraForm Power Remote Operation Center, Albany NY Employment Type: Full-time Travel: Ability to travel to remote sites (10–20%) About Us TerraForm Power (“TERP”), a platform company of Brookfield, attracts high-performing individuals who are driven to make an impact in a fast-paced and collaborative environment. We offer unparalleled opportunities to lead and manage one of the largest renewable energy businesses with decades of history, while contributing to the global need for sustainable energy. The company is committed to employee development, encouraging curiosity, ownership, and continuous learning. You’ll be empowered to take initiative, contribute ideas, and grow your career within a supportive and ambitious organization. This position will be based in remote. Job Summary This is an Operational Technology (OT) role embedded in the TerraForm Power Remote Operations Centre, responsible for designing, implementing, and maintaining secure network perimeters for wind, solar, and battery storage operations with a focus on NERC CIP compliant architecture. The Firewall Engineer will work in close partnership with the TERP Cybersecurity Manager, Compliance and Operations Centre staff to ensure robust, compliant, and resilient OT network security across all sites and control centers. Responsibilities Architecture, Design & Implementation - Design and implement OT network security controls, such as perimeter firewalls, internal segmentation, site‑to‑site and remote‑access VPNs, and WAFs. - Build secure network solutions that align with system architecture for wind, solar, and BESS facilities, EMS/SCADA, and the system control centers. - Define network security zones and conduits for OT, corporate IT, and cloud environments; enforce least privilege and micro‑segmentation. - Engineer solutions using Cisco (ASA/Firepower/FTD) and Check Point (CCSA/CCSE) platforms; integrate with management consoles and policy orchestration tools. - Implement secure remote access for operators, vendors, and field technicians using MFA, bastion/Jump hosts, and role‑based access. Operations, Monitoring & Incident Response - Administer firewall policies, objects, NAT, routing (OSPF/BGP), and HA/cluster configurations; manage rule lifecycle and clean‑up. - Maintain WAF protections (e.g., F5, Fortinet, Check Point, or cloud WAF) including rule tuning, bot mitigation, and API security. - Operate and improve monitoring and control tools (SIEM/SOAR, NetFlow, packet capture, IDS/IPS); build dashboards and alerts for NERC systems. - Conduct log analysis, threat hunting, and participate in incident triage and response; provide on‑call support for critical events. - Perform regular firewall health checks, performance tuning, firmware/OS upgrades, and vulnerability remediation. - Support occasional after‑hours maintenance windows on an as needed basis. Compliance & Change Management (NERC Focus) - Implement and maintain controls aligned to NERC CIP standards applicable to Low Impact sites and Medium Impact control centers (e.g., CIP‑003, CIP‑005, CIP‑007, CIP‑008, CIP‑009, CIP‑010, CIP‑011, CIP‑013). - Serve as the technical owner for firewall‑related CIP controls (for example CIP‑005, CIP‑007, CIP‑010), including configuration baselines, access controls, logging, and evidence collection. - Establish and enforce configuration baselines, access controls, evidence collection, and audit‑ready documentation. - Run structured change management programs for firewall and WAF policies, including risk assessment, testing, approvals, and post‑implementation review. - Support audits, self‑assessments, and impact ratings; assist with personnel risk assessment and vendor risk management where applicable. - Collaborate with OT, IT, Compliance, Engineering, and Plant Operations to ensure controls meet operational needs without compromising reliability. Collaborative Responsibilities - Work in close partnership with the TERP Cybersecurity Manager to align firewall, VPN, and WAF controls with OT/IT cybersecurity strategy, incident response protocols, and compliance requirements. - Participate in joint incident response, risk assessments, and continuous improvement initiatives with the Cybersecurity Manager and Operations Centre leadership. - Coordinate with Operations Centre, plant operators, and engineering teams to ensure security controls support operational reliability and compliance. Technology Evaluation & Continuous Improvement - Evaluate new firewall, WAF, VPN, and OT security technologies; lead POCs and make data‑driven recommendations. - Identify opportunities to enhance resilience (segmentation, Zero Trust, SD‑WAN security, secure cloud connectivity), and automate repeatable tasks (e.g., policy linting, backup/restore, compliance evidence collection). OT-Specific Duties - Manage vendor and contractor access for maintenance and commissioning, ensuring robust controls for temporary access and logging. - Design solutions that address site-specific challenges, including limited bandwidth, remote access constraints, and environmental factors. - Support operational resilience by coordinating change windows with grid operations and implementing failsafe configurations to avoid plant outages. Required Qualifications Engineer - 5+ years of hands‑on experience administering enterprise firewalls and VPNs (Cisco ASA/Firepower/FTD; Check Point). - Working knowledge of WAF technologies and web security (OWASP Top 10, TLS, mTLS, API security). - Strong command of TCP/IP, routing (OSPF/BGP), NAT, ACLs, IPS/IDS, and packet analysis. - Experience with SIEM/log management (e.g., Splunk, QRadar, LogRhythm), network monitoring (e.g., SolarWinds), and configuration management. - Familiarity with NERC CIP concepts and control implementations for Low and/or Medium Impact environments, or equivalent experience in other regulated OT/ICS environments (for example IEC 62443).. - Solid documentation skills and experience operating within formal change management processes. - Clear communicator able to translate complex security topics for plant operations, engineering, compliance, and leadership. - Strong prioritization and execution in high‑availability environments; calm under pressure during incidents. - Collaborative and customer‑focused; builds trusted relationships with site personnel and external partners. Senior Engineer - All above, plus; - 10+ years in network security with deep expertise in Cisco and Check Point ecosystems, including clustering/HA, threat defense, and advanced policy design. - Proven leadership of firewall/WAF architecture in OT/ICS or critical infrastructure (utilities, energy, industrial). - Demonstrated experience interpreting and implementing NERC CIP requirements in Medium Impact control centers, including evidence management and audit support. - Proficiency guiding incident response and problem management for high-availability environments; ability to mentor engineers and lead complex changes. - Track record of evaluating, selecting, and integrating new technologies; experience with automation (e.g., Ansible, Python) and policy compliance tooling. Education & Certifications - Bachelor’s degree in Computer Science, Electrical/Computer Engineering, Information Security, or related field; or equivalent experience. - Relevant certifications preferred: - Cisco: CCNP Security, CCIE (Security) (plus) - Check Point: CCSA/CCSE - Others, a plus Industry‑Specific (Renewable Energy & OT/ICS) Requirements - Experience with the secure transport of with SCADA/EMS, plant DCS/RTUs/PLCs, and OT protocols (OPC, DNP3, Modbus). - Understanding of interconnections between substations, collector systems, BESS EMS, and corporate networks; secure data flows to forecasting, trading, and asset performance platforms. - Knowledge of telecom links common in renewables (leased lines, microwave, LTE/private cellular) and secure backhaul to control centers. - Awareness of site conditions (limited bandwidth, remote access constraints, environmental factors) and designing resilient, maintainable solutions. - Vendor and contractor access management for maintenance, OEM support, and commissioning activities, with strong control over temporary access and logging. - Safety and reliability mindset: change windows coordinated with grid operations, rollback plans, and fail‑safe configurations to avoid plant outages. Compensation: $120,000-$140,000 USD, bonus eligible A note to Recruiting Agencies, TerraForm Power Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of TerraForm Power and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.

Comcast Advertising is driving the TV advertising industry forward, from delivering ads to linear and digital audiences to pioneering the tech that makes it possible. We help brands connect with their audiences on every screen using advanced data, technology, and premium video content. Our media sales division helps local, regional, and national brands reach potential customers through multiscreen TV advertising. Our ad tech division FreeWheel provides comprehensive adtech that makes it easier to buy and sell premium video advertising across all screens, data types, and sales channels. Job Summary Comcast Advertising, the advertising sales division of Comcast Cable, helps local, regional and national advertisers use the best of digital with the power of TV to grow their business. It provides multi-screen marketing solutions to make advertising campaigns more effective and easier to execute. Headquartered in New York with offices throughout the country, Comcast Advertising has a presence in 66 markets with nearly 35 million owned and represented subscribers. We’re dedicated to helping our clients meet their business goals by connecting them with their customers through multiscreen television advertising. Working with companies from local startups to nationwide corporations, we provide support to help each business reach its target customers. By applying data to television advertising in new ways, we’re able to bring our clients the best of digital media, coupled with the power of TV. Join a fast-paced and exciting Tier 3 Production Support team working in the advanced advertising industry; providing in-depth, full stack, solutions that support the cutting-edge applications that powers Comcast Advertising. Successful candidate Senior Engineer position will be a self-motivated individual with a passion for problem-solving, innovating, high standards, and a pro-active mindset. Job Description Core Responsibilities - Take responsibility for customer satisfaction and problem resolution. - Respond promptly, professional, and completely to support requests. - Provide technical subject matter expertise and mentoring to junior Tier 3 engineers. - Lead Tier 3 engagement in the support of major platform/system releases. - Lead Tier 3 collaborations with partner support Tiers, Development and cross-functional teams. - Positive attitude and excellent interpersonal skills and multitasking abilities. - Perform full stack troubleshooting, root cause analysis, and resolution of medium to complex problems. - Proven in-depth knowledge and experience in one or more technical stacks - (Azure / AWS cloud platforms, .Net Core, Angular, Java, Python, API’s, Salesforce, etc.) - Proven in-depth knowledge and experience working in a full stack environment. - Thrive in a collaborative, high-quality, and fluid environment. - Provide clear, concise, and thorough documentation. - Consistent exercise of independent judgement and discretion in matters of significance. - Consistent exercise of independent judgment and discretion in matters of significance. - Regular, consistent and punctual attendance. Must be able to work nights and weekends, variable schedule(s) and overtime as necessary. - Other duties and responsibilities as assigned. Preferred Experience: - 10+ Years of software development experience with .Net applications and API microservices - Experience with SQL, Azure, Salesforce, and Mulesoft - Experience being a lead or leading a team Employees at all levels are expected to: - Understand our Operating Principles; make them the guidelines for how you do your job. - Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services. - Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences. - Win as a team - make big things happen by working together and being open to new ideas. - Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers. - Drive results and growth. - Support a culture of inclusion in how you work and lead. - Do what's right for each other, our customers, investors and our communities. Disclaimer: - This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications. Skills Collaboration, Design, Design Processes, New Software, Planning Compensation National Pay Range: $98,678.80 USD-$231,278.44 USD Illinois Pay Range: $104,846.23 USD - $203,525.03 USD Colorado Pay Range: $111,013.65 USD - $212,776.16 USD Hawaii Pay Range: $129,515.93 USD - $194,273.89 USD Washington DC Pay Range: $141,850.78 USD - $212,776.16 USD Maryland Pay Range: $117,181.08 USD - $212,776.16 USD Minnesota Pay Range: $111,013.65 USD - $194,273.89 USD New York Pay Range: $117,181.08 USD - $231,278.44 USD Washington Pay Range: $111,013.65 USD - $222,027.30 USD New Jersey Pay Range: $123,348.50 USD - $222,027.30 USD Vermont Pay Range: $117,181.08 USD - $185,022.75 USD Massachusetts Pay Range: $123,348.50 USD - $222,027.30 USD California Pay Range: $111,013.65 USD - $205,580.83 Comcast intends to offer the selected candidate base pay within the posted range for this role at the time of posting dependent on job-related, non-discriminatory factors such as experience. Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details. The application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later. Education Bachelor's Degree While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience. Certifications (if applicable) Relevant Work Experience 7-10 Years Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law. Comcast will consider for employment applicants with arrest or conviction records in accordance with the requirements of applicable law, including the San Francisco Fair Chance Ordinance, the Los Angeles Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Please note that federal state, or local laws and regulations may restrict or prohibit Comcast from hiring individuals convicted of certain crimes. Additionally, an applicant’s criminal history may have a direct, adverse, and negative relationship on the job duties of this position, which may result in the withdrawal of a conditional offer of employment.

• Develop and maintain core Java components of BotCity's Products • Develop solutions in Core Java with a focus on clarity, maintainability, and performance • Write clean, efficient, and well-tested code, with ownership from requirement to production • Apply design patterns and object-oriented principles thoughtfully in the architecture of solutions • Implement and optimize routines that require concurrency control, thread management, and JVM resource handling • Write robust unit tests, ensuring coverage and testable code design from the start • Participate in code reviews focused on technical quality, pointing out design improvements and readability • Communicate blockers and progress clearly and in a timely manner • Analyze and resolve performance issues, identifying bottlenecks in JVM behavior and application code • Document technical decisions and contribute to the evolution of the team's development standards.

• Collaborate closely with key stakeholders and a team of data scientists • Design and implement new project code and MLOps frameworks for the deployment of models in production • Build machine learning models for financial / investment company • Partner with client teams to identify opportunities where data science could add value, helping generate demand and shape a roadmap for future work • Monitor existing productionised pipelines, addressing any issues in a timely manner to ensure smooth and continuous operation