Senior Secure WAN Architect & Encryption Engineer

Vt Arc; Arlington (VA); Hybrid; USD 225,000 - 275,000; Full time

Job summary

VT-ARC in Arlington, VA is seeking a Senior Secure WAN Encryption Engineer & Architect to lead secure transport architecture and encryption integration across enterprise networks, including CSfC-aligned and Type 1 solutions. The role requires a Top Secret/SCI clearance and deep crypto expertise applied to network design, validation, and operations.

You will coordinate with program leadership and mission teams to deliver secure interconnects across WAN/LAN, cloud, satellite, and air‑gapped

Qualifications

• Active Top Secret/SCI clearance and U.S. citizenship.
• Senior-level WAN/network/secure transport experience in DoD/federal environments.
• Experience deploying Type 1/HAIPE CSfC-based solutions.
• Ability to produce architecture diagrams and implementation guides.

Responsibilities

• Serve as the senior SME for secure WAN encryption, secure transport architecture, network crypto placement.
• Lead architecture input for encryption deployment across enterprise WANs, enclaves, cloud interconnects, and private transport.
• Evaluate encryption approaches including Type 1/HAIPE, CSfC-aligned solutions, IPsec VPN, MACsec, TLS and PKI-enabled transport.
• Translate mission requirements and topology into practical secure transport designs.
• Engineer A-side/B-side designs, red/black separation, crypto boundary placement, and monitoring paths.
• Support CSfC-aware architecture planning and RMF/ATO alignment.
• Assess commercial crypto products for DoD/high-assurance use and accreditation dependencies.
• Coordinate dependencies across COMSEC, PKI, WAN/LAN, cloud, cybersecurity and operations teams.
• Develop secure WAN encryption architectures, migration plans, runbooks, and handoff documentation.
• Support lab validation, PoC, site deployments, cutovers, and transition to operations.
• Plan crypto modernization by evaluating current designs and migration strategies.
• Ensure designs meet DoD/NSA/CNSS RMF/ATO/STIG and program security requirements.
• Mentor teams on encryption tradeoffs and operational impacts.

Skills

WAN architecture

Routing & switching

CSfC concepts

Type 1 encryption

PKI/CA

Zero Trust

Secure transport

MTU analysis

Tools

IPsec VPN

MACsec

TLS/SSL

PKI

SD-WAN security

Job description

VT-ARC in Arlington, VA is seeking a Senior Secure WAN Encryption Engineer & Architect to lead secure transport architecture and encryption integration across enterprise networks, including CSfC-aligned and Type 1 solutions. The role requires a Top Secret/SCI clearance and deep crypto expertise applied to network design, validation, and operations.

You will coordinate with program leadership and mission teams to deliver secure interconnects across WAN/LAN, cloud, satellite, and air‑gapped