COMSEC Network Engineer

About This Role

This hands-on engineering position supports secure communications for U.S. diplomatic posts worldwide. The role involves engineering and integrating cryptographic systems, sustaining a secure global network, and proving new cryptographic solutions can reach production safely. A significant part of the job is key management, including operating Key Management Infrastructure and deploying Over-the-Network Keying.

Responsibilities

• Integrate HAIPE-compliant inline network encryptors, secure voice systems, and CSfC solution components into a global enterprise network
• Build test plans and run interoperability, regression, and failure-mode testing, then make go or no-go calls with evidence
• Provide Tier II and Tier III support for COMSEC incidents escalated from the service desk, including an on-call rotation covering all time zones
• Operate KMI client nodes and Advanced Key Processors, and execute key ordering, distribution, accounting, and destruction under Two-Person Integrity
• Deploy Over-the-Network Keying: key wrapping and release infrastructure, site readiness, cutover from courier distribution, and scheduled, emergency, and on-demand rekey
• Engineer cryptographic modernization into the installed base, including HAIPE upgrades and the move toward CNSA 2.0 and post-quantum-ready algorithms
• Document what you build and train the custodians and junior operations engineers who will run it

Requirements

• Bachelor’s degree in a technical discipline and 5+ years of COMSEC or network security related experience; 4+ additional years of relevant experience may substitute for the degree
• 3+ years of hands-on COMSEC or cryptographic related work, including cryptographic equipment, keying material handling, and accountability within a COMSEC account
• Working knowledge of HAIPE-compliant INEs, secure terminals, and fill devices
• A real IP networking foundation, including routing, VPN and tunneling, firewalls, and the ability to read a packet capture and reason from it
• Active TOP SECRET clearance with SCI eligibility, and the ability to obtain cryptographic access authorization
• U.S. citizenship required
• Willingness to take on-call rotation, support maintenance windows, and travel occasionally in support of post deployments

Nice to have:

• NSA or Service COMSEC training, or prior service as a COMSEC Custodian or Alternate
• Hands-on experience deploying over-the-network or electronic key distribution
• CSfC engineering experience

Important Details

• On-call rotation: covers all time zones
• Travel: occasional, in support of post deployments

About the Company