About Us:
VT-ARC, a technical services and applied research company, has built an organizational culture marked by four primary values: Teamwork, Integrity, Excellence, and Service. Integral to our success is our staff’s enthusiasm for solving tough problems by working together in teams to get the job done. We foster a culture where every employee’s contribution is valued and performed with integrity while maintaining a fun work environment. VT-ARC strives for excellence in all that is done for our clients, and such achievement is recognized through service/merit awards. Moreover, we promote a sense of community larger than VT-ARC alone, where staff and institutional resources can be applied in service to our country.
We are proud to be the recipient of the Best Workplace in Defense Award by Emergent Magazine, an honor that recognizes companies with positive cultures that not only impact their people but also make a meaningful difference in the community.
About You:
You are a senior Inline Encryption and Crypto Engineer with deep experience implementing, integrating, and sustaining Type 1 encryption solutions for enterprise networks, classified enclaves, and mission communications environments.
You understand A-side/B-side inline encryption models, red/black separation, encryption boundary design, COMSEC-controlled environments, keying dependencies, management paths, failover behavior, and the practical realities of deploying encryption across multiple transport layers.
You are adaptable and comfortable working across and coordinating closely across technical teams and individual contributors. You have a mission focus and take pride in building systems the right way and supporting them end-to-end.
Position Overview:
VT-ARC is seeking a Senior to Staff level Inline Encryption / Crypto Engineer to support enterprise encryption engineering, Type 1 inline encryption integration, crypto modernization, and secure transport implementation for mission-critical programs within TS/SCI environments.
This role is focused on crypto engineering across the full implementation lifecycle, from requirements interpretation and architecture input through detailed design, integration planning, deployment, validation, documentation, and transition to operations. The role supports global enterprise networks across multiple transport layers, including internet-connected, private transport, classified, multi-enclave, and fully air-gapped environments.
The Inline Encryption / Crypto Engineer will partner with programmatic staff and technical leads to deliver secure and mission-aligned encryption capabilities. You have a mission focus and take pride in building systems the right way and supporting them end-to-end.
Active Top Secret/SCI clearance is required.
Duties/Responsibilities:
- Support end-to-end inline encryption engineering activities, including architecture input, detailed design, implementation planning, integration, validation, and operational transition.
- Design, implement, integrate, and modernize Type 1 inline encryption capabilities across global enterprise networks, classified enclaves, multi-enclave environments, and air-gapped networks.
- Engineer A-side/B-side placements, red/black separation, crypto boundary designs, keying dependencies, management paths, high availability, and failover behavior.
- Integrate encryption capabilities across multiple transport layers, including WAN, LAN, private transport, commercial transport, cloud interconnect, satellite, and mission communications paths.
- Coordinate crypto engineering dependencies with COMSEC, KMI, WAN, LAN, UC, identity, cybersecurity, infrastructure, and operations teams.
- Develop crypto implementation plans, connection diagrams, test procedures, migration runbooks, configuration records, and operational support documentation.
- Support lab validation, proof-of-concept activities, integration events, cutovers, troubleshooting, and operational acceptance testing.
- Ensure encryption designs and implementation activities support applicable DoD, NSA, CNSS, RMF, ATO, STIG, and program security requirements.
- Provide technical mentoring and implementation guidance to network and mission communications teams on crypto integration dependencies and operational impacts.
Required Education, Certification, Skills, Capabilities:
- Demonstrated senior-level experience implementing or integrating inline encryption, network encryption, COMSEC-dependent transport, or secure network boundary capabilities in classified or high-assurance environments.
- Working knowledge of Type 1 encryption concepts, A-side/B-side design, red/black separation, encrypted transport integration, crypto boundary placement, and keying dependencies.
- Experience supporting global or multi-site enterprise networks across WAN, LAN, private transport, carrier services, classified enclaves, or air-gapped operating environments.
- Ability to coordinate technical dependencies among COMSEC, network engineering, cybersecurity, systems engineering, operations, and mission stakeholders.
- Strong understanding of routing, switching, segmentation, transport diversity, high availability, failover, monitoring, and troubleshooting as they relate to encryption deployments.
- Experience supporting RMF processes, ATO documentation, STIG compliance, security controls, or equivalent cybersecurity compliance activities for network infrastructure.
- Ability to produce clear technical documentation, diagrams, implementation guides, test procedures, and operational handoff materials.
Desired Education, Certification, Skills, Capabilities:
- Experience with NSA Type 1 inline encryptors, HAIPE environments and cross domain solutions, TACLANE or equivalent controlled cryptographic equipment.
- Familiarity with COMSEC operations, KMI processes, key material handling dependencies, and controlled equipment lifecycle processes.
- Professional certifications such as Security+, CISSP, SANS, INCOSE CSEP or ESEP, OCSMP (MBSE), CCNP, JNCIP, or equivalent technical credentials.
- Experience integrating encryption with SD-WAN, MPLS, satellite, cloud interconnect, UC, and mission communications environments.
- Experience with packet capture, crypto troubleshooting, path validation, network performance analysis, or transport failover testing.
- Familiarity with Zero Trust principles, defense-in-depth network design, and secure enclave integration.
Primary Work Location: Work is expected to be fully onsite in Arlington, VA.
Special Work Conditions: Occasional travel may be required; up to 10%
Security:
- Must be a U.S. Citizen
- Active Top Secret/SCI clearance is required
Competitive Salary: VT-ARC offers a competitive salary and benefits package designed to attract and retain senior technical talent supporting mission-critical programs.
Salary: $185,000-$220,000/yr., based on skills, experience, clearance, technical depth, and mission alignment.
Virginia Tech Applied Research Corporation: VT-ARC is a 501(c)(3), non-profit R&D organization affiliated with Virginia Polytechnic Institute and State University (Virginia Tech or VT). Our mission is to provide superior analytic and technology solutions across multiple domains by leveraging Virginia Tech’s multidisciplinary research and innovation ecosystem. With unique access to the broad and rich research enterprise found at Virginia Tech, VT-ARC forms multi-disciplinary teams to apply innovative solutions to the real-world problems that strain our social, political, industrial, and economic foundations.
To learn more about VT-ARC’s Benefits, Perks, Culture & more visit our Careers page: https://vt-arc.org/careers/
Virginia Tech Applied Research Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by law. As a federal contractor, we are committed to providing equal employment opportunity and affirmative action for qualified individuals with disabilities under Section?503 of the Rehabilitation Act of 1973. If you need a reasonable accommodation to complete the application or interview process, please contact Human Resources at [email protected]
Virginia Tech Applied Research Corporation uses E-Verify to confirm the employment eligibility of all newly hired employees. To learn more about E-Verify, including your rights and responsibilities, please visit www.E-Verify.gov.
