Description
We are seeking a highly skilled COMSEC and Network Engineer to lead the integration and management of secure communications within a classified Azure Cloud environment.
This role is critical in bridging the gap between traditional cryptographic hardware and modern software-defined networking in a high-stakes, multi-domain mission space. You will be responsible for the end-to-end security of data in transit, ensuring that our classified cloud infrastructure meets all regulatory requirements while maintaining peak operational performance.
Key Responsibilities
- Cryptographic Architecture: Design and implement Secure Communications (COMSEC) solutions across classified Azure environments (IL5/IL6), ensuring compliance with NSA Commercial Solutions for Classified (CSfC) requirements.
- Cloud Networking: Manage and optimize Azure virtual networks, ExpressRoute, and VPN Gateways to maintain low-latency, high-security connectivity.
- Hardware Integration: Install, configure, and maintain Type-1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems.
- Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.
- Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.
- Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI).
- Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).
- Compliance & Audits: Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.
- Incident Reporting: Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.
- Training & Briefing: Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.
- Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.
Required Qualifications
- BA/BS or equivalent experience
- Experience: 8+ years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.
- Clearance: Secret with ability to obtain and maintain TS/SCI
- Cloud Expertise: Proven experience configuring networking components within Azure Government or Classified Cloud environments.
Technical Knowledge
- Deep understanding of OSI Model, TCP/IP, BGP, and IPsec.
- Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI).
- Experience with CSfC Multi-Site and Mobile Access Capability Packages.
- Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments.
- Familiarity with Zero Trust Architecture (ZTA) principles in a tactical or enterprise edge environment.
- Previous experience as a COMSEC Custodian or Alternate.
Benefits
- Growth: AI-powered career tool that identifies career steps and learning opportunities
- Support: An internal mobility team focused on helping you achieve your career goals
- Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off
- Community: Award-winning culture of innovation and a military-friendly workplace