{bc}
Apply
workday

Senior COMSEC & Network Engineer (Cloud/Classified)

General Dynamics Information Technology
El Segundo, USA
Full-time
Senior · 8+ years experience
Discovered 3 weeks ago
azureterraform

Full Job Posting

Skills:

  • Certifications:
  • Experience:
  • US Citizenship Required:
  • Job Description:
  • We are seeking a highly skilled COMSEC and Network Engineer to lead the integration and management of secure communications within a classified Azure Cloud environment. This role is critical in bridging the gap between traditional cryptographic hardware and modern software-defined networking in a high-stakes, multi-domain mission space. You will be responsible for the end-to-end security of data in transit, ensuring that our classified cloud infrastructure meets all regulatory requirements while maintaining peak operational performance.

Key Responsibilities

  • Cryptographic Architecture: Design and implement Secure Communications (COMSEC) solutions across classified Azure environments (IL5/IL6), ensuring compliance with NSA Commercial Solutions for Classified (CSfC) requirements.
  • Cloud Networking: Manage and optimize Azure virtual networks, ExpressRoute, and VPN Gateways to maintain low-latency, high-security connectivity.
  • Hardware Integration: Install, configure, and maintain Type-1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems.
  • Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.
  • Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.
  • Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI).
  • Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).
  • Compliance & Audits: Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.
  • Incident Reporting: Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.
  • Training & Briefing: Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.
  • Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.

Required Qualifications

  • BA/BS or equivalent experience
  • Experience: 8+ years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.
  • Clearance: Secret with ability to obtain and maintain TS/SCI
  • Cloud Expertise: Proven experience configuring networking components within Azure Government or Classified Cloud environments.
  • Technical Knowledge
  • Deep understanding of OSI Model, TCP/IP, BGP, and IPsec.
  • Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI).
  • Experience with CSfC Multi-Site and Mobile Access Capability Packages.
  • Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments.
  • Familiarity with Zero Trust Architecture (ZTA) principles in a tactical or enterprise edge environment.
  • Previous experience as a COMSEC Custodian or Alternate.
  • Certifications
  • DoD 8570 IAT Level II or III (e.g., Security+, CISSP, or CASP+).
  • Azure Solutions Architect or Azure Network Engineer Associate preferred.
  • Clearance: Active Secret with ability to obtain and maintain TS/SCI
  • GDIT IS YOUR PLACE
  • At GDIT, the mission is our purpose, and our people are at the center of everything we do.
  • Growth: AI-powered career tool that identifies career steps and learning opportunities
  • Support: An internal mobility team focused on helping you achieve your career goals
  • Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off
  • Community: Award-winning culture of innovation and a military-friendly workplace
  • OWN YOUR OPPORTUNITY
  • Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.
  • Scheduled Weekly Hours:
  • Travel Required:
  • Telecommuting Options:
  • We are seeking a highly skilled COMSEC and Network Engineer to lead the integration and management of secure communications within a classified Azure Cloud environment. This role is critical in bridging the gap between traditional cryptographic hardware and modern software-defined networking in a high-stakes, multi-domain mission space. You will be responsible for the end-to-end security of data in transit, ensuring that our classified cloud infrastructure meets all regulatory requirements while maintaining peak operational performance.
  • Key Responsibilities
  • Cryptographic Architecture: Design and implement Secure Communications (COMSEC) solutions across classified Azure environments (IL5/IL6), ensuring compliance with NSA Commercial Solutions for Classified (CSfC) requirements.
  • Cloud Networking: Manage and optimize Azure virtual networks, ExpressRoute, and VPN Gateways to maintain low-latency, high-security connectivity.
  • Hardware Integration: Install, configure, and maintain Type-1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems.
  • Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.
  • Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.
  • Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI).
  • Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).
  • Compliance & Audits: Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.
  • Incident Reporting: Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.
  • Training & Briefing: Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.
  • Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.
  • 8+ years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.
  • gdit.com/tc.

Work Location:

  • Additional Work Locations:
  • Total Rewards at GDIT:
  • Our Identity Verification Process:
  • About Our Work:
  • gdit.com/tc.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at General Dynamics Information Technology

Sr. Healthcare Data Analyst (Medicaid)

, USA

Discovered Today

Summer 2027 Knowledge Management Specialist Associate (Intern)

Bossier City, USA

Discovered TodayFull-time

Cyber Operations Analyst II

, USA

Discovered TodayFull-time

OSINT/PAI Targeting Analyst SME

, USA

Discovered TodayFull-time

Business Process Analyst (State of Louisiana)

, USA

Discovered TodayFull-time

EVM Analyst

, USA

Discovered TodayFull-time

Cloud Architect

, USA

Discovered TodayFull-time

Security Analyst

Chantilly, USA

Discovered TodayFull-time