COMSEC Operations Lead

The Communication Security Operations Lead provides operational execution, and technical leadership for Department of State’s (DOS) Communication Security Division’s Operations support team. This team is responsible for providing operational support to the custodians of the department’s high-assurance Communications Security (COMSEC) infrastructure.

One of the key responsibilities for this pivotal role is the transformation of the current legacy 24/7 network and COMSEC monitoring practice into a modern, proactive practice built around automation, intelligent alerting, real-time dashboards, and reduced operational toil.

This position oversees a multidisciplinary team-including network and systems engineers, security analysts, COMSEC auditors, logistics specialists, and data engineers-ensuring the delivery of robust, compliant, and software-driven cryptographic solutions.

The scope encompasses the entire high-assurance ecosystem lifecycle (KMI and INE solutions, secure warehouse logistics) with a heavy focus on spearheading the adoption of Over-the-Network Keying (OTNK), transitioning to Post-Quantum Cryptography (PQC) solutions, and deploying next-generation High-Assurance Inline Network Encryption (HAIPE) and Next Generation Load Devices (NGLD).

This role may require occasional trips to other DoS locations within the DMV area.

Key Responsibilities:

Operations Modernization & Team Leadership

• Transformational Leadership: Manage, mentor, and upskill a large team of KMI professionals, engineers, analysts, and logistics personnel, transitioning them from manual, reactive monitoring to automated, proactive engineering practices.
• Reduction of Toil: Eliminate "staring at monitors" by designing and implementing automated workflows, centralized health dashboards, and high-fidelity, actionable alerting frameworks.
• Resource Integration: Align staffing and skills across distinct engineering, daily cryptographic operations, and compliance workstreams to support a modernized infrastructure.
• Culture of Innovation: Foster continuous training on emerging cryptographic standards, Zero Trust Architecture (ZTA), and automated configuration management.

Advanced Cryptographic Engineering & PQC Adoption

• Post-Quantum Cryptography (PQC) Transition: Support cryptographic asset discovery, and implementation of PQC algorithms adoption strategies in alignment with CNSA 2.0.
• Crypto-Agility Engineering: Support the implementation of crypto-agile frameworks capable of seamlessly ingesting new cryptographic algorithms via software updates, minimizing the need for physical hardware replacement.
• Solutions Development: Support the testing and deployment of secure enterprise and tactical cryptographic solutions & CSfC approved solutions optimized for modern network architectures.

Next-Gen Infrastructure & OTNK Deployment

• OTNK Scaling: lead and support operational tasks associated with the overhauling of current key management practice by scaling Over-the-Network Keying (OTNK) protocols, drastically reducing manual touchpoints and legacy physical key delivery.
• Next-Gen HAIPE Deployment: Lead the technical evaluation, laboratory benchmarking, and phased rollout of next-generation HAIPE devices, ensuring multi-enclave throughput, backward compatibility, and adherence to national security validation standards.
• Modern Load Infrastructure: Oversee the strategic transition from legacy fill devices to modern Next Generation Load Device (NGLD) platforms, integrating seamlessly with contemporary Key Management Infrastructure (KMI).

Automated Vulnerability Management & Secure Logistics

• Automated Patching & Vulnerability Management: Direct rigorous testing, scheduling, and automated deployment of firmware modifications, software patches, and security configurations across all high-assurance assets.

Required Education & Experience:

• Bachelors in Computer Science, Cybersecurity, Electrical Engineering, or a related technical discipline and 9 years or more experience; may accept additional experience in lieu of degree.

Required Technical Competencies:

• Modernization & Automation Frameworks: Proven experience transforming legacy 24/7 operations teams using automation tools, monitoring/alerting platforms, and real-time dashboarding (e.g., modern SIEM, telemetry dashboards, infrastructure-as-code).
• Next-Gen Cryptography & Standards: Deep understanding of PQC adoption, crypto-agility, OTNK, Key Management Infrastructure (KMI), and type-1 encryption devices (e.g., TACLANE, SKL, KGV platforms).
• Compliance Alignment: Documented experience aligning enterprise technology with National Security Agency (NSA) Commercial National Security Algorithm (CNSA 2.0) guidelines and NIST standards.
• Testing & Prototyping: Proven ability to establish isolated testing enclaves, define Proof-of-Concept (PoC) performance criteria, and manage low-blast-radius deployment strategies for new cryptographic solutions.
• PKI Engineering: Deep expertise in Public Key Infrastructure (PKI) engineering and lifecycle management.

Leadership & Strategic Skills:

• Change Management & Scale: Success leading and culturally transforming large technical teams within high-stakes, mission-critical environments from manual operations to modern engineering practices.
• Stakeholder Diplomacy: Exceptional written and verbal communication skills, with a proven ability to present complex operational issues, technical risks, and automation roadmaps, to leadership and external governance boards.
• Decisiveness: Strong command presence with a methodical, risk-based approach to incident response, vulnerability management, and infrastructure bottlenecks.

Preferred Certifications:

• CISSP, CISM, or formal federal/defense COMSEC Manager certifications.

Required Clearance:

• US Citizenship.
• Active Secret clearance with the ability to obtain a top secret clearance.