# COMSEC and Network Engineer

**Company**: GDIT
**Location**: El Segundo, CA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $107,744 - $143,750
**Category**: Engineering
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-CA-El-Segundo/Senior-COMSEC---Network-Engineer--Cloud-Classified-_RQ229601-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_e27f235f-c75

## Description

We are seeking a highly skilled COMSEC and Network Engineer to lead the integration and management of secure communications within a classified Azure Cloud environment.

This role is critical in bridging the gap between traditional cryptographic hardware and modern software-defined networking in a high-stakes, multi-domain mission space. You will be responsible for the end-to-end security of data in transit, ensuring that our classified cloud infrastructure meets all regulatory requirements while maintaining peak operational performance.

**Key Responsibilities**

- Cryptographic Architecture: Design and implement Secure Communications (COMSEC) solutions across classified Azure environments (IL5/IL6), ensuring compliance with NSA Commercial Solutions for Classified (CSfC) requirements.

- Cloud Networking: Manage and optimize Azure virtual networks, ExpressRoute, and VPN Gateways to maintain low-latency, high-security connectivity.

- Hardware Integration: Install, configure, and maintain Type-1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems.

- Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.

- Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.

- Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI).

- Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).

- Compliance & Audits: Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.

- Incident Reporting: Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.

- Training & Briefing: Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.

- Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.

**Required Qualifications**

- BA/BS or equivalent experience

- Experience: 8+ years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.

- Clearance: Secret with ability to obtain and maintain TS/SCI

- Cloud Expertise: Proven experience configuring networking components within Azure Government or Classified Cloud environments.

**Technical Knowledge**

- Deep understanding of OSI Model, TCP/IP, BGP, and IPsec.

- Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI).

- Experience with CSfC Multi-Site and Mobile Access Capability Packages.

- Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments.

- Familiarity with Zero Trust Architecture (ZTA) principles in a tactical or enterprise edge environment.

- Previous experience as a COMSEC Custodian or Alternate.

**Benefits**

- Growth: AI-powered career tool that identifies career steps and learning opportunities

- Support: An internal mobility team focused on helping you achieve your career goals

- Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off

- Community: Award-winning culture of innovation and a military-friendly workplace

## Skills

### Required
- COMSEC
- Network Engineering
- Cryptographic systems
- Azure Government
- Classified Cloud environments
- OSI Model
- TCP/IP
- BGP
- IPsec
- HAIPE
- Key Management Infrastructure (KMI)
- CSfC Multi-Site and Mobile Access Capability Packages
- Infrastructure as Code (Terraform, Bicep, or ARM templates)
- Zero Trust Architecture (ZTA)

### Nice to have
- DoD 8570 IAT Level II or III
- Azure Solutions Architect
- Azure Network Engineer Associate

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/USA-CA-El-Segundo/Senior-COMSEC---Network-Engineer--Cloud-Classified-_RQ229601-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)