COMSEC Network Engineer

SAIC; Newington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking a COMSEC Engineer to support secure communications for U.S. diplomatic posts worldwide.

You will design and integrate cryptographic systems and manage key distribution across a secure global network. This hands-on role requires TS clearance and readiness to travel; you will provide Tier II/III engineering support, operate KMI nodes, and deploy Over-the-Network Keying to replace courier-delivered keys.

Qualifications

• Bachelor’s degree in a technical discipline; 5+ years of COMSEC or network security experience.
• 3+ years hands-on COMSEC or cryptographic work—keying material handling and accountability.
• Working knowledge of HAIPE-compliant INEs, secure terminals, and fill devices.
• Solid IP networking foundation: routing, VPNs, firewalls, and packet captures.
• U.S. citizenship with active TOP SECRET clearance; SCI eligibility.
• Willingness to on-call rotate and travel occasionally.

Responsibilities

• Integrate HAIPE-compliant inline network encryptors and CSfC components into the global network.
• Build test plans and run interoperability, regression, and failure-mode testing with evidence behind it.
• Provide Tier II/III COMSEC support for incidents, including on-call coverage across time zones.
• Operate KMI clients and Advanced Key Processors, handling key ordering, distribution, and destruction.
• Deploy Over-the-Network Keying and manage rekey cycles.
• Engineer cryptographic modernization including CNSA 2.0 and post-quantum-ready algorithms.
• Document designs and train custodians and junior engineers.

Skills

HAIPE INEs

Secure terminals

Fill devices

IP networking

Packet capture reading

On-call / travel readiness

Education

Bachelor’s degree in technical discipline

Tools

CSfC engineering

Job description

Description

SAIC is hiring a COMSEC Engineer to support secure communications for U.S. diplomatic posts worldwide. You will engineer and integrate cryptographic systems, support the sustainment of a secure global network, prove new and emerging cryptographic solutions and enhancements to existing solutions can reach production ecosystems safely and without disruption to mission, and provide Tier II and Tier III engineering support as needed. A significant part of the role is key management: operating Key Management Infrastructure and deploying Over-the-Network Keying, which replaces courier-delivered key with secure network delivery to posts around the world.

This is a hands-on engineering position in a mission environment where the work is visible. When a post loses secure connectivity, you are who they reach.

Position Overview

SAIC is hiring a COMSEC Engineer to support secure communications for U.S. diplomatic posts worldwide. You will engineer and integrate cryptographic systems, support the sustainment of a secure global network, prove new and emerging cryptographic solutions and enhancements to existing solutions can reach production ecosystems safely and without disruption to mission, and provide Tier II and Tier III engineering support as needed. A significant part of the role is key management: operating Key Management Infrastructure and deploying Over-the-Network Keying, which replaces courier-delivered key with secure network delivery to posts around the world.

This is a hands-on engineering position in a mission environment where the work is visible. When a post loses secure connectivity, you are who they reach.

What You Will Do

Integrate HAIPE-compliant inline network encryptors, secure voice systems, and CSfC solution components into a global enterprise network.

Build test plans and run interoperability, regression, and failure-mode testing, then make the go or no-go call with evidence behind it.

Provide Tier II and Tier III support for COMSEC incidents escalated from the service desk — device faults, keying failures, loss of secure connectivity — including an on-call rotation covering all time zones.

Operate KMI client nodes and Advanced Key Processors, and execute key ordering, distribution, accounting, and destruction under Two-Person Integrity.

Deploy Over-the-Network Keying: key wrapping and release infrastructure, site readiness, cutover from courier distribution, and scheduled, emergency, and on-demand rekey.

Engineer cryptographic modernization into the installed base, including HAIPE upgrades and the move toward CNSA 2.0 and post-quantum-ready algorithms.

Document what you build and train the custodians and junior operations engineers who will run it.

Qualifications

What You Need

• Bachelor’s degree in technical discipline and 5+ years of COMSEC or network security related experience; 4+ additional years of relevant experience may substitute for the degree.
• 3+ years of hands-on COMSEC or cryptographic related work — cryptographic equipment, keying material handling, and accountability within a COMSEC account.
• Working knowledge of HAIPE-compliant INEs, secure terminals, and fill devices.
• A real IP networking foundation — routing, VPN and tunneling, firewalls, and the ability to read a packet capture and reason from it.
• Active TOP SECRET clearance with SCI eligibility, and the ability to obtain cryptographic access authorization. U.S. citizenship required.
• Willingness to take on-call rotation, support maintenance windows, and travel occasionally in support of post deployments.

Nice to Have

• NSA or Service COMSEC training, or prior service as a COMSEC Custodian or Alternate.
• Hands-on experience deploying over-the-network or electronic key distribution.
• CSfC engineering experience, including the dual-layer encryption model.
• Department of State or other Federal overseas post experience.
• CISSP, CASP+, or vendor engineering certification on a deployed INE or network platform.
• ServiceNow ITSM and CMDB.

Why This Role

Cryptographic modernization at the Department is live work, not a roadmap item — post-quantum migration, network-delivered key, and a next-generation accountability platform are all in motion. You will be qualified across engineering, test, key management, and operations rather than siloed in one, with a defined path toward Senior COMSEC Engineer and engineering leadership.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.