COMSEC Network Engineer

SAIC•Springfield, VA

About The Position

SAIC is hiring a COMSEC Engineer to support secure communications for U.S. diplomatic posts worldwide. This hands-on engineering role focuses on integrating cryptographic systems, sustaining a secure global network, evaluating new and emerging cryptographic solutions and enhancements for safe production deployment, and providing Tier II and Tier III engineering support. The position includes key management responsibilities, including operating Key Management Infrastructure and deploying Over-the-Network Keying to deliver keys securely to posts worldwide. The engineer integrates HAIPE-compliant inline network encryptors, secure voice systems, and CSfC solution components into a global enterprise network. They develop test plans and conduct interoperability, regression, and failure-mode testing, documenting evidence for go/no-go decisions. They provide escalated COMSEC incident support, operate KMI client nodes and Advanced Key Processors, and perform key ordering, distribution, accounting, and destruction under Two-Person Integrity. The role also includes deploying and maintaining Over-the-Network Keying infrastructure, engineering cryptographic modernization such as HAIPE upgrades and migration toward CNSA 2.0 and post-quantum-ready algorithms, and documenting solutions and training custodians and junior operations engineers. The position requires participation in an on-call rotation covering all time zones, support for maintenance windows, and occasional travel for post deployments. SAIC describes the work as part of active cryptographic modernization, including post-quantum migration, network-delivered key, and a next-generation accountability platform. The role offers a defined path toward Senior COMSEC Engineer and engineering leadership.

Requirements

Bachelor’s degree in a technical discipline and 5+ years of COMSEC or network security related experience; 4+ additional years of relevant experience may substitute for the degree.
3+ years of hands-on COMSEC or cryptographic related work, including cryptographic equipment, keying material handling, and accountability within a COMSEC account.
Working knowledge of HAIPE-compliant INEs, secure terminals, and fill devices.
IP networking foundation, including routing, VPN and tunneling, firewalls, and ability to read and reason from a packet capture.
Active TOP SECRET clearance with SCI eligibility and ability to obtain cryptographic access authorization.
U.S. citizenship.
Willingness to participate in an on-call rotation, support maintenance windows, and travel occasionally for post deployments.

Nice To Haves

NSA or Service COMSEC training, or prior service as a COMSEC Custodian or Alternate.
Hands-on experience deploying over-the-network or electronic key distribution.
CSfC engineering experience, including the dual-layer encryption model.
Department of State or other Federal overseas post experience.
CISSP, CASP+, or vendor engineering certification on a deployed INE or network platform.
ServiceNow ITSM and CMDB experience.

Responsibilities

Integrate HAIPE-compliant inline network encryptors, secure voice systems, and CSfC solution components into a global enterprise network.
Build test plans and conduct interoperability, regression, and failure-mode testing; make evidence-based go/no-go decisions.
Provide Tier II and Tier III support for escalated COMSEC incidents, including device faults, keying failures, and loss of secure connectivity.
Participate in an on-call rotation covering all time zones and support maintenance windows.
Operate KMI client nodes and Advanced Key Processors.
Execute key ordering, distribution, accounting, and destruction under Two-Person Integrity.
Deploy Over-the-Network Keying, including key wrapping and release infrastructure, site readiness, cutover from courier distribution, and scheduled, emergency, and on-demand rekey.
Engineer cryptographic modernization into the installed base, including HAIPE upgrades and migration toward CNSA 2.0 and post-quantum-ready algorithms.
Document engineered solutions and train custodians and junior operations engineers.
Travel occasionally in support of post deployments.