Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.
Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.
Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI).
Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).
Compliance & Audits: Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.
Incident Reporting: Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.
Training & Briefing: Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.
Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.
Required Qualifications
BA/BS or equivalent experience
Experience: 8+ years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.
Clearance: Secret with ability to obtain and maintain TS/SCI
Cloud Expertise: Proven experience configuring networking components within Azure Government or Classified Cloud environments.
Technical Knowledge
Deep understanding of OSI Model, TCP/IP, BGP, and IPsec.
Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI).
Experience with CSfC Multi-Site and Mobile Access Capability Packages.
Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments.
Familiarity with Zero Trust Architecture (ZTA) principles in a tactical or enterprise edge environment.
