We are seeking a highly skilled COMSEC and Network Engineer to lead the integration and management of secure communications within a classified Azure Cloud environment. This role is critical in bridging the gap between traditional cryptographic hardware and modern software-defined networking in a high-stakes, multi-domain mission space. You will be responsible for the end-to-end security of data in transit, ensuring that our classified cloud infrastructure meets all regulatory requirements while maintaining peak operational performance.

Key Responsibilities

• Cryptographic Architecture: Design and implement Secure Communications (COMSEC) solutions across classified Azure environments (IL5/IL6), ensuring compliance with NSA Commercial Solutions for Classified (CSfC) requirements.

• Cloud Networking: Manage and optimize Azure virtual networks, ExpressRoute, and VPN Gateways to maintain low-latency, high-security connectivity.

• Hardware Integration: Install, configure, and maintain Type-1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems.

• Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.

• Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.

• Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI).

• Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).

• Compliance & Audits:Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.

• Incident Reporting:Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.

• Training & Briefing:Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.

• Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.

Required Qualifications

• BA/BS or equivalent

• Experience: 8+ years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.

• Clearance: Secret with ability to obtain and maintain TS/SCI

• Cloud Expertise: Proven experience configuring networking components within Azure Government or Classified Cloud environments.

Technical Knowledge:

• Deep understanding of OSI Model, TCP/IP, BGP, and IPsec.

• Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI).

• Experience with CSfC Multi-Site and Mobile Access Capability Packages.

• Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments.

• Familiarity with Zero Trust Architecture (ZTA) principles in a tactical or enterprise edge environment.

• Previous experience as a COMSEC Custodian or Alternate.

Certifications:

• DoD 8570 IAT Level II or III (e.g., Security+, CISSP, or CASP+).

• Azure Solutions Architect or Azure Network Engineer Associate preferred.

• Clearance: Active Secret with ability to obtain and maintain TS/SCI

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities

• Support: An internal mobility team focused on helping you achieve your career goals

• Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off

• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY

Explore an enterprise IT career at GDIT and youll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.