Communication Security Lead Architect

SAIC•Springfield, VA

About The Position

The Communication Security Lead Architect provides strategic direction, technical leadership, and operational execution for the department of State’s (DOS) high-assurance Communications Security (COMSEC) infrastructure. This position oversees a multidisciplinary team of professionals, such as network engineers, systems engineers, security analysts, COMSEC auditors, and logistics specialists, Data Engineers ensuring the delivery of robust, compliant, and innovative cryptographic solutions. This position encompasses all stages of the high-assurance ecosystem lifecycle, including KMI and INE solutions, Over-the-Network Keying (OTNK) implementations, secure warehouse logistics, as well as overseeing the evaluation, selection, and phased introduction of emerging technologies. The primary focus of this role is spearheading modernization efforts, including adoption automation, dashboarding, and Post-Quantum Cryptography (PQC), and transitioning to next-generation High-Assurance Inline Network Encryption (HAIPE) and modern fill devices.

Requirements

Bachelors in Computer Science, Cybersecurity, Electrical Engineering, or a related technical discipline and fourteen (14) years or more experience; Masters and twelve (12) years or more experience; may accept additional experience in lieu of degree.
Deep understanding of traditional and modern COMSEC architecture, Key Management Infrastructure (KMI), and type-1 encryption devices (e.g., TACLANE, SKL, KGV platforms).
Experience aligning enterprise technology with National Security Agency (NSA) Commercial National Security Algorithm (CNSA 2.0) guidelines and NIST standards.
Proven ability to establish isolated testing enclaves, define Proof-of-Concept (PoC) performance criteria, and manage low-blast-radius deployment strategies.
Demonstrated success leading large technical teams (25+ personnel) within high-stakes, mission-critical environments.
Exceptional written and verbal communication skills, with a proven ability to present complex technical risks and engineering roadmaps to executive leadership and external governance boards.
Strong command presence with a methodical, risk-based approach to incident response, vulnerability management, and infrastructure bottlenecks.
US Citizenship.
Active secret clearance with the ability to obtain a top secret clearance.

Nice To Haves

CISSP, CISM, or formal federal/defense COMSEC Manager certifications.
PKI Engineering expertise.

Responsibilities

Manage, mentor, and evaluate a large team of KMI professional, Network & Systems engineers, security analysts, COMSEC auditors, and logistics personnel.
Align staffing and skill sets across distinct engineering, daily cryptographic operations, and compliance workstreams.
Foster continuous training on emerging cryptographic standards, Zero Trust Architecture (ZTA), and evolving threat vectors.
Lead the technical evaluation, laboratory benchmarking, and phased rollout of next-generation HAIPE devices, ensuring multi-enclave throughput, backward compatibility, and adherence to national security validation standards.
Oversee the strategic transition from legacy fill devices to modern Next Generation Load Device (NGLD) platforms, integrating seamlessly with contemporary Key Management Infrastructure (KMI).
Drive the adoption of crypto-agile frameworks capable of seamlessly ingesting new cryptographic algorithms without requiring extensive physical hardware replacement.
Architect, test, and deploy secure enterprise and tactical cryptographic solutions.
Drive strategic roadmaps, cryptographic asset discovery, and the implementation of PQC algorithms to safeguard data against quantum threats.
Direct rigorous testing, scheduling, and deployment of firmware modifications, software patches, and security configurations across all high-assurance assets.
Supervise secure warehouse environments managing Controlled Cryptographic Items (CCI), ensuring strict compliance regarding receipt, storage, distribution, and destruction.
Oversee traditional and modern automated key generation, escrow, and distribution mechanisms, specializing in Over-the-Network Keying (OTNK) protocols.
Direct comprehensive COMSEC account audits to maintain absolute compliance with federal, defense, or institutional security mandates.
Serve as the technical representative on executive steering committees and inter-agency governance working groups to influence cryptographic policy.
Partner with external security agencies, technical vendors, and institutional stakeholders to evaluate emerging tools and synchronize joint operational frameworks.