COMSEC Network Engineer

SAIC • Springfield, VA

7d

About The Position

SAIC is hiring a COMSEC Engineer to support secure communications for U.S. diplomatic posts worldwide. The role engineers and integrates cryptographic systems, sustains a secure global network, tests new cryptographic solutions and enhancements for safe production deployment, and provides Tier II and Tier III engineering support. It is a hands-on engineering position in a mission environment, with responsibility for responding to secure-connectivity issues at posts around the world.

A significant focus is key management, including operating Key Management Infrastructure (KMI) and deploying Over-the-Network Keying (OTNK), which enables secure network delivery of keys to posts instead of courier delivery. The role also supports cryptographic modernization, including HAIPE upgrades and movement toward CNSA 2.0 and post-quantum-ready algorithms. The position includes an on-call rotation covering all time zones, maintenance-window support, and occasional travel for post deployments.

Requirements

• Bachelor’s degree in a technical discipline and at least 5 years of COMSEC or network security-related experience; 4 additional years of relevant experience may substitute for the degree.
• At least 3 years of hands-on COMSEC or cryptographic-related work, including cryptographic equipment, keying-material handling, and accountability within a COMSEC account.
• Working knowledge of HAIPE-compliant inline network encryptors, secure terminals, and fill devices.
• A foundation in IP networking, including routing, VPNs and tunneling, firewalls, and the ability to read and reason from a packet capture.
• Active TOP SECRET clearance with SCI eligibility and ability to obtain cryptographic access authorization.
• U.S. citizenship.
• Willingness to participate in an on-call rotation, support maintenance windows, and travel occasionally for post deployments.

Nice To Haves

• NSA or Service COMSEC training, or prior service as a COMSEC Custodian or Alternate.
• Hands-on experience deploying over-the-network or electronic key distribution.
• CSfC engineering experience, including the dual-layer encryption model.
• Department of State or other Federal overseas post experience.
• CISSP, CASP+, or vendor engineering certification on a deployed inline network encryptor or network platform.
• Experience with ServiceNow ITSM and CMDB.

Responsibilities

• Integrate HAIPE-compliant inline network encryptors, secure voice systems, and CSfC solution components into a global enterprise network.
• Develop test plans and conduct interoperability, regression, and failure-mode testing; make evidence-based go/no-go recommendations.
• Provide Tier II and Tier III support for escalated COMSEC incidents, including device faults, keying failures, and loss of secure connectivity.
• Participate in an on-call rotation covering all time zones and support maintenance windows.
• Operate KMI client nodes and Advanced Key Processors; perform key ordering, distribution, accounting, and destruction under Two-Person Integrity.
• Deploy Over-the-Network Keying, including key-wrapping and release infrastructure, site readiness, cutover from courier distribution, and scheduled, emergency, and on-demand rekeying.
• Engineer cryptographic modernization into the installed base, including HAIPE upgrades and the transition toward CNSA 2.0 and post-quantum-ready algorithms.
• Document engineering work and train custodians and junior operations engineers.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior