Senior COMSEC & Network Engineer; Cloud​/Classified

We are seeking a highly skilled COMSEC and Network Engineer to lead the integration and management of secure communications within a classified Azure Cloud environment. This role is critical in bridging the gap between traditional cryptographic hardware and modern software-defined networking in a high-stakes, multi-domain mission space.

You will be responsible for the end‑to‑end security of data in transit, ensuring that our classified cloud infrastructure meets all regulatory requirements while maintaining peak operational performance.

• Cryptographic Architecture:
  Design and implement Secure Communications (COMSEC) solutions across classified Azure environments (IL5/IL6), ensuring compliance with NSA Commercial Solutions for Classified (CSfC) requirements.
• Cloud Networking:
  Manage and optimize Azure virtual networks, Express Route, and VPN Gateways to maintain low‑latency, high‑security connectivity.
• Hardware Integration:
  Install, configure, and maintain Type‑1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems.
• Policy & Compliance:
  Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.
• Cross‑Functional
  
  Collaboration:
  
  Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.
• Accountability & Inventory:
  Maintains records of all COMSEC material, performing physical inventories (often semi‑annually) and securing Controlled Cryptographic Items (CCI).
• Keying Material Management:
  Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).
• Compliance & Audits:
  Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.
• Incident Reporting:
  Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.
• Training & Briefing:
  Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.
• Destruction and Disposal:
  Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.

• BA/BS or equivalent experience
• Experience:
  
  8+ years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.
• Clearance:
  Secret with ability to obtain and maintain TS/SCI
• Cloud Expertise:
  Proven experience configuring networking components within Azure Government or Classified Cloud environments.
• Technical Knowledge:
  Deep understanding of OSI Model, TCP/IP, BGP, and IPsec.
• Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI).
• Experience with CSfC Multi‑Site and Mobile Access Capability Packages.
• Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments.
• Familiarity with Zero Trust Architecture (ZTA) principles in a tactical or enterprise edge environment.
• Previous experience as a COMSEC Custodian or Alternate.
• Certifications:
  
  DoD 8570 IAT Level II or III (e.g., Security+, CISSP, or CASP+). Azure Solutions Architect or Azure Network Engineer Associate preferred.
• Clearance:
  Active Secret with ability to obtain and maintain TS/SCI

At GDIT, the mission is our purpose, and our people are at the center of everything we do. Growth: AI-powered career tool that identifies career steps and learning opportunities Support:
An…