Security Engineer

Senior Communications Security (COMSEC) EngineerGES is seeking a Senior Communications Security (COMSEC) Engineer in Fort Belvoir, VA to support large-scale migration and operations on a large, high-profile DoW contract. The I3TS program provides enterprise-wide IT support to enable DTRA's Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA's internal and external mission partners operating in CONUS and OCONUS locations.The Senior COMSEC Engineer will provide full life-cycle IT support across numerous customer systems. The COMSEC Engineer will implement COMSEC policies and procedures, ensuring the protection of the organization's information systems from unauthorized access or use. The successful candidate should have hands-on experience configuring and keying COMSEC devices as well as a solid understanding of networking equipment and information security. The candidate should also have strong organizational skills, be attentive to detail, and have strong written and verbal communication skills.Primary work location: Fort Belvoir, VA. Secondary work location: Reston, VA.DoD Top Secret/SCI clearance required.Primary Responsibilities:Orchestrates organizational adherence to COMSEC policies, spearheading internal oversight programs to ensure 100% user compliance with federal and agency-specific security requirements.Engineers the end-to-end configuration, deployment, and integration of high-assurance cryptographic hardware, utilizing advanced diagnostics to minimize mean time to repair (MTTR) and maximize system uptime.Manages the health and sustainment of active cryptographic fleets, implements proactive maintenance strategies and scheduled refreshes to eliminate service disruptions during mission-critical windows.Safeguards the integrity of physical and electronic keying material, meticulously managing the lifecycle of COMSEC aids through rigorous protection and distribution protocols.Executes high-tempo rekeying schedules in strict alignment with customer-mandated crypto-periods, ensuring zero lapse in secure communication capabilities across the enterprise.Maintains comprehensive accountability of COMSEC assets across disparate accounts and networks, utilizing automated tracking systems to provide real-time visibility of hardware and material status.Leads enterprise-level accountability efforts, consistently achieving "Satisfactory" or "Excellent" ratings during annual inspections and external audits through precise material documentation.Serves as the Lead COMSEC Authority, developing and delivering specialized custodian training programs for cross-functional teams to standardize security practices and mitigate human-factor risks.Synchronizes COMSEC operations with external customers and deployment teams, ensuring all installation schedules remain compliant with evolving security standards and mission milestones.Subject matter expertise on complex cryptographic integration and mission-driven security architecture, advising senior leadership on technical risks and mitigation strategies.Conducts CONUS-wide mission support, deploying high-priority sites to lead complex hardware installations, emergency troubleshooting, and critical infrastructure maintenance.Required QualificationsGeneral Dynamics Mission Systems (GDMS) TACLANE® Encryptor Operator Training certifiedBS degree and 8 – 12 years of prior relevant experience or Masters with 6 – 10 years of prior relevant experience. May possess a Doctorate in technical domain. Specific experience, education and training may be considered in lieu of degree.A minimum of 4 years of experience in an IT-related field with at least 2 years of prior COMSEC or other security-related experienceFamiliarity with GEMOne and Chimera cryptographic network management software suitesExtensive experience with General Dynamics TACLANE devices (specifically KG-175F, G and X).Knowledge of current cryptographic devices/methods as well as COMSEC principles and practicesAbility to implement processes and maintain administrative documentationKnowledge and basic understanding of network transport devices that are attached to the encryption devices (examples: routers, switches, firewalls)Knowledge and basic understanding of Information Security practices and devicesStrong collaboration and customer service skillsAbility to work in a fast-paced, collaborative team environmentSelf-starter with ability to work independently as well as in team environmentsDoD 8140/8570.01-M IAT Level II certification (e.g. Security+ CE)Desired QualificationsGEM® One Encryptor Manager Operator Training certifiedCisco Certified Network Associate certificationExperience in network and network security design where under general direction, manages the design, installation and support of LAN/WAN based networks and security components such as routers, switches and firewalls, and datacenter equipment