Senior Secure WAN Architect & Encryption SME

Virginia Tech Applied Research Corporation; Arlington (VA); On-site; USD 225,000 - 275,000; Full time

Job summary

Virginia Tech Applied Research Corporation in Arlington, VA, seeks a Senior Secure WAN Encryption Engineer & Architect to lead secure transport architecture and encryption integration across enterprise WANs, enclaves, cloud interconnects, and carrier networks.

The role requires active TS/SCI clearance, deep crypto expertise, and the ability to translate mission requirements into practical designs, migration plans, and operational handoff documentation. Travel up to 10% may be required.

Qualifications

• Active Top Secret/SCI clearance and U.S. citizenship are required.
• Senior-level WAN/network engineer or architect with DoD/federal experience.
• Strong WAN design, routing, switching, and high-availability knowledge.
• Experience integrating Type 1/HAIPE, CSfC‑aligned architectures, or IPsec/MACsec/TLS in classified networks.
• Ability to produce architecture diagrams, migration plans, test procedures, and handoff documentation.

Responsibilities

• Serve as senior SME for secure WAN encryption and secure transport architecture.
• Lead encryption deployment decisions across enterprise WANs, enclaves, cloud interconnects, and carrier networks.
• Evaluate encryption approaches (Type 1/HAIPE, CSfC, IPsec, MACsec, TLS).
• Translate mission requirements into practical secure transport designs.
• Develop migration plans, runbooks, and operational handoff materials.
• Coordinate with COMSEC, PKI, cybersecurity, and mission teams.
• Support lab validation, PoC, and deployment activities.
• Mentor teams on CSfC, crypto tradeoffs, and operational impacts.

Skills

WAN architecture

Secure transport

Encryption integration

CSfC concepts

PKI/Crypto

Network security

RMF/ATO

Tools

IPsec VPN

MACsec

TLS

Job description

Virginia Tech Applied Research Corporation in Arlington, VA, seeks a Senior Secure WAN Encryption Engineer & Architect to lead secure transport architecture and encryption integration across enterprise WANs, enclaves, cloud interconnects, and carrier networks.

The role requires active TS/SCI clearance, deep crypto expertise, and the ability to translate mission requirements into practical designs, migration plans, and operational handoff documentation. Travel up to 10% may be required.