Communication Security Operations Lead

About the role

The Communication Security Operations Lead provides operational execution and technical leadership for the Department of State's (DOS) Communication Security Division's Operations support team. This team is responsible for providing operational support to the custodians of the department's high-assurance Communications Security (COMSEC) infrastructure.

Key responsibilities

• Transform the current legacy 24/7 network and COMSEC monitoring practice into a modern, proactive practice built around automation, intelligent alerting, real-time dashboards, and reduced operational toil
• Oversee a multidisciplinary team including network and systems engineers, security analysts, COMSEC auditors, logistics specialists, and data engineers
• Ensure delivery of robust, compliant, and software-driven cryptographic solutions across the entire high-assurance ecosystem lifecycle (KMI and INE solutions, secure warehouse logistics)
• Spearhead the adoption of Over-the-Network Keying (OTNK), transition to Post-Quantum Cryptography (PQC) solutions, and deployment of next-generation High-Assurance Inline Network Encryption (HAIPE) and Next Generation Load Devices (NGLD)
• Manage, mentor, and upskill a large team of KMI professionals, engineers, analysts, and logistics personnel, transitioning them from manual, reactive monitoring to automated, proactive engineering practices
• Eliminate "staring at monitors" by designing and implementing automated workflows, centralized health dashboards, and high-fidelity, actionable alerting frameworks
• Align staffing and skills across distinct engineering, daily cryptographic operations, and compliance workstreams to support a modernized infrastructure
• Foster continuous training on emerging cryptographic standards, Zero Trust Architecture (ZTA), and automated configuration management
• Support cryptographic asset discovery and implementation of PQC algorithms adoption strategies in alignment with CNSA 2.0
• Support the implementation of crypto-agile frameworks capable of seamlessly ingesting new cryptographic algorithms via software updates, minimizing the need for physical hardware replacement
• Support the testing and deployment of secure enterprise and tactical cryptographic solutions and CSfC approved solutions optimized for modern network architectures
• Lead and support operational tasks associated with overhauling current key management practice by scaling Over-the-Network Keying (OTNK) protocols, drastically reducing manual touchpoints and legacy physical key delivery
• Lead the technical evaluation, laboratory benchmarking, and phased rollout of next-generation HAIPE devices, ensuring multi-enclave throughput, backward compatibility, and adherence to national security validation standards
• Oversee the strategic transition from legacy fill devices to modern Next Generation Load Device (NGLD) platforms, integrating seamlessly with contemporary Key Management Infrastructure (KMI)
• Direct rigorous testing, scheduling, and automated deployment of firmware modifications, software patches, and security configurations across all high-assurance assets

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Electrical Engineering, or a related technical discipline with 9 or more years of experience; may accept additional experience in lieu of degree
• Proven experience transforming legacy 24/7 operations teams using automation tools, monitoring/alerting platforms, and real-time dashboarding (e.g., modern SIEM, telemetry dashboards, infrastructure-as-code)
• Deep understanding of PQC adoption, crypto-agility, OTNK, Key Management Infrastructure (KMI), and type-1 encryption devices (e.g., TACLANE, SKL, KGV platforms)
• Documented experience aligning enterprise technology with National Security Agency (NSA) Commercial National Security Algorithm (CNSA 2.0) guidelines and NIST standards
• Proven ability to establish isolated testing enclaves, define Proof-of-Concept (PoC) performance criteria, and manage low-blast-radius deployment strategies for new cryptographic solutions
• Deep expertise in Public Key Infrastructure (PKI) engineering and lifecycle management
• Success leading and culturally transforming large technical teams within high-stakes, mission-critical environments from manual operations to modern engineering practices
• Exceptional written and verbal communication skills, with a proven ability to present complex operational issues, technical risks, and automation roadmaps to leadership and external governance boards
• Strong command presence with a methodical, risk-based approach to incident response, vulnerability management, and infrastructure bottlenecks
• US Citizenship
• Active Secret clearance with the ability to obtain a Top Secret clearance

Preferred qualifications

• CISSP, CISM, or formal federal/defense COMSEC Manager certifications

Pay

Target salary range $120,001 - $160,000.

Schedule

Full-time, day shift. Occasional trips to other DoS locations within the DMV area may be required. No travel otherwise.

This response is AI-generated, for reference only.