COMSEC Engineer

SAIC • Springfield, VA

4d

About The Position

SAIC currently has an opening for a Communications Security Engineer to support the Department of State (DoS) Bureau of Diplomatic Technology. DT provides enterprise architecture design, engineering, operations and maintenance support services for desktops, servers, networks, firewalls, and enterprise applications across the Department. The Security Engineer shall develop next-generation security solutions to secure the organization’s communication fabric. This role engineers the next generation security layers that protect data moving across internal networks, cloud environments, and remote access tunnels. They are the strategic lead in ensuring that every network handshake—whether via TLS, IPsec, or SSH—is backed by a robust and resilient cybersecurity infrastructure. This is a part time position and less than 30 hrs/week.

Requirements

• Develop next-generation security solutions to secure the organization’s communication fabric.
• Engineer security layers that protect data moving across internal networks, cloud environments, and remote access tunnels.
• Ensure every network handshake (TLS, IPsec, or SSH) is backed by a robust and resilient cybersecurity infrastructure.
• Manage certificates and configurations for VPNs, secure gateways, and encrypted communication channels.
• Develop and implement automated workflows for security credential lifecycle.
• Align access with the organization’s identity management framework.
• Monitor and report on encryption and network security controls.
• Conduct regular reviews of hybrid and cloud-based configurations.
• Identify and remediate security gaps in the hybrid network infrastructure.
• Assess risks associated with data movement between environments.
• Implement hardening measures to protect against unauthorized access or data leakage.
• Provide subject matter expertise during security incidents.
• Assist in rapid revocation and replacement of compromised credentials.

Responsibilities

• Oversee the security of network tunnels and data-in-transit protocols, including managing certificates and configurations for VPNs, secure gateways, and encrypted communication channels.
• Develop and implement automated workflows for the lifecycle of security credentials to reduce manual intervention, minimize human error, and ensure timely rotation.
• Align access with the organization’s identity management framework, ensuring authorized access to sensitive keys and logging/auditing all access.
• Monitor and report on the status of encryption and network security controls, conducting regular reviews to ensure compliance with security policies and regulatory requirements.
• Identify and remediate security gaps in the hybrid network infrastructure, assessing risks and implementing hardening measures.
• Provide subject matter expertise during security incidents involving encryption failures or unauthorized network access, assisting in credential revocation and replacement.

What This Job Offers

• Job Type: Part-time
• Career Level: Senior
• Education Level: No Education Listed