Enterprise COMSEC Engineer

Position Summary

The Enterprise COMSEC Engineer serves as the technical lead for Communications Security (COMSEC) engineering, key management, and encryption device lifecycle management. This position provides enterprise-level expertise in COMSEC operations, secure communications planning, cryptographic modernization, and compliance with customer-specific security policies.

The Enterprise COMSEC Engineer partners with government COMSEC authorities, cybersecurity personnel, network engineers, and site COMSEC custodians to ensure the secure deployment, operation, accountability, and sustainment of cryptographic systems supporting mission-critical communications. The successful candidate will lead enterprise encryption modernization initiatives, maintain COMSEC accountability, develop operational procedures, and ensure compliance with federal security regulations.

Key Responsibilities

• Serve as the enterprise subject matter expert (SME) for Communications Security (COMSEC) engineering and cryptographic systems.
• Provide technical guidance and oversight to primary and alternate COMSEC custodians across the enterprise, ensuring consistent implementation of COMSEC policies, procedures, and accountability requirements.
• Manage the headquarters COMSEC account, including the receipt, storage, issuance, inventory, destruction, and accountability of all COMSEC material in accordance with applicable security regulations.
• Maintain complete accountability for cryptographic keying material, Controlled Cryptographic Items (CCI), and associated COMSEC records and documentation.
• Develop, maintain, and update COMSEC Standard Operating Procedures (SOPs), Emergency Action Plans (EAPs), Continuity of Operations (COOP) procedures, and supporting technical documentation.
• Lead enterprise cryptographic modernization projects, including the replacement, lifecycle management, and software/firmware upgrades of encryption devices across multiple customer locations.
• Plan, coordinate, and oversee enterprise-wide implementation of encryption device software updates to ensure operational readiness, security compliance, and minimal mission disruption.
• Install, configure, maintain, troubleshoot, and decommission Type 1 encryption devices, key management systems, and associated secure communications equipment.
• Coordinate closely with federal COMSEC oversight organizations to ensure proper installation, configuration, accountability, and lifecycle management of all COMSEC assets.
• Conduct internal COMSEC audits, inspections, inventories, and self-assessments to verify compliance with security directives and identify opportunities for process improvement.
• Ensure proper handling, safeguarding, transfer, destruction, and documentation of classified COMSEC material in accordance with applicable federal regulations.
• Plan and implement new secure communications capabilities to support customer mission requirements while coordinating closely with network engineering, cybersecurity, and infrastructure teams.
• Support secure voice, data, network, satellite, and transport encryption solutions across enterprise environments.
• Evaluate emerging cryptographic technologies and provide recommendations for improving enterprise secure communications capabilities.
• Support incident response activities involving COMSEC material, cryptographic equipment, or security violations and assist with corrective action planning.
• Prepare technical reports, executive briefings, project schedules, and compliance documentation for government stakeholders.
• Support accreditation activities and maintain compliance with applicable IC, DoD, CNSS, NSA, and organizational security requirements.

Required Qualifications

• Minimum of 12 years with BS/BA; Minimum of 10 years with MS/MA; Minimum of 7 years with Ph.D., 16 years with a HS Diploma
• Demonstrated experience managing enterprise COMSEC accounts and supporting multiple geographically dispersed COMSEC custodians.
• Experience installing, configuring, maintaining, and troubleshooting NSA-approved encryption devices and cryptographic key management systems.
• Experience leading enterprise encryption modernization efforts, including hardware replacement, software upgrades, and lifecycle management.
• Thorough understanding of COMSEC accountability procedures, Controlled Cryptographic Item (CCI) handling, key management, and cryptographic material destruction requirements.
• Experience conducting COMSEC inventories, inspections, audits, and compliance assessments.
• Strong understanding of secure network architectures, telecommunications, and secure communications infrastructure.
• Ability to develop technical documentation, operating procedures, implementation plans, and executive-level reports.
• Excellent organizational, analytical, and communication skills with the ability to coordinate across multiple government organizations and technical teams.
• Active TS/SCI or Q/SCI

Preferred Qualifications

• Experience supporting Intelligence Community or Department of Energy intelligence organizations.
• Familiarity with NSA Key Management Infrastructure (KMI), Electronic Key Management System (EKMS), and successor technologies.
• Experience with Type 1 encryption devices such as TACLANE, KG-series, KIV-series, or other NSA-certified cryptographic equipment.
• Security+, CISSP, Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or comparable cybersecurity certification.