Job description

Type of Requisition: Regular Clearance Level Must Currently Possess: Secret Clearance Level Must Be Able to Obtain: Top Secret/SCI Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Job Qualifications: Skills: Communications Security (COMSEC), Infrastructure, Network Engineering Certifications: None Experience: 8 + years of related experience US Citizenship Required: Yes Job Description: We are seeking a highly skilled COMSEC and Network Engineer to lead the integration and management of secure communications within a classified Azure Cloud environment. This role is critical in bridging the gap between traditional cryptographic hardware and modern software-defined networking in a high-stakes, multi-domain mission space. You will be responsible for the end-to-end security of data in transit, ensuring that our classified cloud infrastructure meets all regulatory requirements while maintaining peak operational performance. Key Responsibilities Cryptographic Architecture: Design and implement Secure Communications (COMSEC) solutions across classified Azure environments (IL5/IL6), ensuring compliance with NSA Commercial Solutions for Classified (CSfC) requirements. Cloud Networking: Manage and optimize Azure virtual networks, ExpressRoute, and VPN Gateways to maintain low-latency, high-security connectivity. Hardware Integration: Install, configure, and maintain Type-1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems. Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates. Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer. Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI). Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL). Compliance & Audits: Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies. Incident Reporting: Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed. Training & Briefing: Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material. Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment. Required Qualifications BA/BS or equivalent experience Experience: 8 years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems. Clearance: Secret with ability to obtain and maintain TS/SCI Cloud Expertise: Proven experience configuring networking components within Azure Government or Classified Cloud environments. Technical Knowledge Deep understanding of OSI Model, TCP/IP, BGP, and IPsec. Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI). Experience with CSfC Multi-Site and Mobile Access Capability Packages. Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments. Familiarity with Zero Trust Architecture (ZTA) principles in a tactical or enterprise edge environment. Previous experience as a COMSEC Custodian or Alternate. Certifications DoD 8570 IAT Level II or III (e.g., Security , CISSP, or CASP ). Azure Solutions Architect or Azure Network Engineer Associate preferred. Clearance: Active Secret with ability to obtain and maintain TS/SCI GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do. Growth: AI-powered career tool that identifies career steps and learning opportunities Support: An internal mobility team focused on helping you achieve your career goals Rewards: Comprehensive benefits and wellness packages, 401K with company match, competitive pay and paid time off Community: Award-winning culture of innovation and a military-friendly workplace OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward. The likely salary range for this position is $107,744 - $143,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: 10-25% T elecommuting Options: Onsite Work Location: USA CA El Segundo Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc . Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Requirements

Must-haves

Top Secret/SCI
IT Infrastructure and Operations
Communications Security (COMSEC), Infrastructure, Network Engineering Certifications:
8 + years of related experience US Citizenship Required:
Cloud Networking: Manage and optimize Azure virtual networks, ExpressRoute, and VPN Gateways to maintain low-latency, high-security connectivity.
Hardware Integration: Install, configure, and maintain Type-1 encryption devices (e.g., TACLANE) and cryptographic keying materials using specialized management systems.
Policy & Compliance: Develop and maintain Standard Operating Procedures (SOPs) for key management, device auditing, and incident response in accordance with government security mandates.
Cross-Functional Collaboration: Partner with Cloud Architects, Network Engineers and Security Engineers to troubleshoot complex connectivity issues and mitigate vulnerabilities within the transport layer.
Accountability & Inventory: Maintains records of all COMSEC material, performing physical inventories (often semi-annually) and securing Controlled Cryptographic Items (CCI).
Keying Material Management: Orders, receives, secures, loads, and destroys COMSEC keying material using systems like the Key Management Infrastructure (KMI) or Simple Key Loader (SKL).
Compliance & Audits: Conducts regular audits and inspections to identify vulnerabilities, ensuring compliance with National Security Agency (NSA) and agency policies.
Incident Reporting: Reports known or suspected COMSEC incidents immediately to the program office, ensuring proper procedures are followed.
Training & Briefing: Conducts initial briefings and debriefings for authorized users, managing access lists to restricted areas/material.
Destruction and Disposal: Oversees the authorized destruction of keying material and coordinates the disposal of obsolete cryptographic equipment.
BA/BS or equivalent experience
Experience: 8 years of experience in Network Engineering with at least 4 years focused on COMSEC and Cryptographic systems.
Clearance: Secret with ability to obtain and maintain TS/SCI
Cloud Expertise: Proven experience configuring networking components within Azure Government or Classified Cloud environments.
Technical Knowledge
Deep understanding of OSI Model, TCP/IP, BGP, and IPsec.
Proficiency with HAIPE (High Assurance IP Encryptor) devices and Key Management Infrastructure (KMI).
Experience with CSfC Multi-Site and Mobile Access Capability Packages.
Experience with Infrastructure as Code (Terraform, Bicep, or ARM templates) to automate secure network deployments.

Nice-to-haves

Azure Solutions Architect or Azure Network Engineer Associate preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureai

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401k

401(K)

Pto

Paid Time Off

Wellness