Senior Secure WAN Encryption Architect

Vt Arc; Arlington (VA); On-site; USD 225,000 - 275,000; Full time

Job summary

VT-ARC seeks a Senior Secure WAN Encryption Engineer & Architect to lead secure transport architecture, encryption integration, and CSfC-aware solutions for mission-critical programs in secure environments. You will evaluate crypto options (Type 1, CSfC, IPsec, TLS), plan migrations, and coordinate across COMSEC, PKI, and operations teams.

The role requires Top Secret/SCI clearance, extensive DoD/network experience, and proven ability to deliver end-to-end secure transport designs in complex

Qualifications

• Active Top Secret/SCI clearance and U.S. citizenship required.
• Senior-level WAN/network engineer or architect with DoD/federal experience.
• Strong understanding of WAN architecture, routing, switching, segmentation, and high availability.

Responsibilities

• Serve as senior SME for secure WAN encryption and secure transport architecture.
• Lead architecture decisions for encryption deployment across multiple transport environments.
• Evaluate and recommend encryption approaches including Type 1/HAIPE, CSfC, IPsec VPN, MACsec, TLS, PKI.
• Translate mission requirements and constraints into practical secure transport designs.
• Engineer A-side/B-side designs, red/black separation, crypto boundary placement, and failover considerations.
• Support CSfC architecture planning and RMF/ATO alignment.
• Assess cipher suites, interoperability, and accreditation dependencies for secure transport products.
• Coordinate dependencies across COMSEC, PKI, WAN, cloud, cybersecurity, and operations teams.
• Develop secure transport architectures, migration plans, and test procedures.

Skills

WAN architecture

Secure transport

CSfC concepts

Type 1/HAIPE

PKI

IPsec VPN

MACsec

TLS

SD-WAN

Tools

IPsec VPN gateways

MACsec

TLS

SD-WAN

Job description

VT-ARC seeks a Senior Secure WAN Encryption Engineer & Architect to lead secure transport architecture, encryption integration, and CSfC-aware solutions for mission-critical programs in secure environments. You will evaluate crypto options (Type 1, CSfC, IPsec, TLS), plan migrations, and coordinate across COMSEC, PKI, and operations teams.

The role requires Top Secret/SCI clearance, extensive DoD/network experience, and proven ability to deliver end-to-end secure transport designs in complex