Communication Security Operations Lead

Job

Location: Springfield, VA, US

Date Posted:

Category: Cyber

Subcategory: Cyber Engineer

Schedule: Full-Time

Shift: Day Job

Travel: No

Minimum Clearance Required: Secret

Clearance Level Must Be Able to Obtain: Top Secret

Potential for Remote Work:

Description

The Communication Security Operations Lead provides operational execution, and technical leadership for Department of State's (DOS) Communication Security Division's Operations support team. This team is responsible for providing operational support to the custodians of the department's high-assurance Communications Security (COMSEC) infrastructure.

One of the key responsibilities for this pivotal role is the transformation of the current legacy 24/7 network and COMSEC monitoring practice into a modern, proactive practice built around automation, intelligent alerting, real-time dashboards, and reduced operational toil.

This position oversees a multidisciplinary team-including network and systems engineers, security analysts, COMSEC auditors, logistics specialists, and data engineers-ensuring the delivery of robust, compliant, and software-driven cryptographic solutions.

The scope encompasses the entire high-assurance ecosystem lifecycle (KMI and INE solutions, secure warehouse logistics) with a heavy focus on spearheading the adoption of Over-the-Network Keying (OTNK), transitioning to Post-Quantum Cryptography (PQC) solutions, and deploying next-generation High-Assurance Inline Network Encryption (HAIPE) and Next Generation Load Devices (NGLD).

Key Responsibilities:

Operations Modernization & Team Leadership

• Transformational Leadership:
  Manage, mentor, and upskill a large team of KMI professionals, engineers, analysts, and logistics personnel, transitioning them from manual, reactive monitoring to automated, proactive engineering practices.
• Reduction of Toil:
  Eliminate "staring at monitors" by designing and implementing automated workflows, centralized health dashboards, and high-fidelity, actionable alerting frameworks.
• Resource Integration:
  Align staffing and skills across distinct engineering, daily cryptographic operations, and compliance work streams to support a modernized infrastructure.
• Culture of Innovation:
  Foster continuous training on emerging cryptographic standards, Zero Trust Architecture (ZTA), and automated configuration management.

Advanced Cryptographic Engineering & PQC Adoption

• Post-Quantum Cryptography (PQC) Transition:
  Support cryptographic asset discovery, and implementation of PQC algorithms adoption strategies in alignment with CNSA 2.0.
• Crypto-Agility Engineering:
  Support the implementation of crypto-agile frameworks capable of seamlessly ingesting new cryptographic algorithms via software updates, minimizing the need for physical hardware replacement.
• Solutions Development:
  Support the testing and deployment of secure enterprise and tactical cryptographic solutions & CSfC approved solutions optimized for modern network architectures.

Next-Gen Infrastructure & OTNK Deployment

• OTNK Scaling: lead and support operational tasks associated with the overhauling of current key management practice by scaling Over-the-Network Keying (OTNK) protocols, drastically reducing manual touchpoints and legacy physical key delivery.
• Next-Gen HAIPE Deployment:
  Lead the technical evaluation, laboratory benchmarking, and phased rollout of next-generation HAIPE devices, ensuring multi-enclave throughput, backward compatibility, and adherence to national security validation standards.
• Modern Load Infrastructure:
  Oversee the strategic transition from legacy fill devices to modern Next Generation Load Device (NGLD) platforms, integrating seamlessly with contemporary Key Management Infrastructure (KMI).

Automated Vulnerability Management & Secure Logistics

• Automated Patching & Vulnerability Management:
  Direct rigorous testing, scheduling, and automated deployment of firmware modifications, software patches, and security configurations across all high-assurance assets.

Qualifications

Required Education & Experience:

• Bachelors in Computer Science, Cybersecurity, Electrical Engineering, or a related technical discipline and fourteen (14) years or more experience;
  Ma…