Jobs at cFocus Software Incorporated

Build and maintain secure CI/CD pipelines across on-premises, cloud, and hybrid environments. Implement Infrastructure as Code, Configuration as Code, cybersecurity controls, STIG compliance, monitoring, vulnerability remediation, configuration management, and ATO evidence processes. Develop automation scripts, support incident response, maintain software traceability, and integrate approved AI capabilities into DevSecOps workflows. The role is on-site in Linthicum Heights, Maryland, and requires an active TS/SCI clearance.

Leads SOC analysts and response personnel supporting the United States Air Force. Oversees alert triage, threat hunting, investigations, incident response, vulnerability remediation, staffing, coverage, compliance documentation, and Government reporting. Coordinates defensive cyber operations across IT and OT environments, manages cyber taskers, supports RMF activities, evaluates SOC tools and telemetry, and improves incident response procedures and operational readiness. The role is on-site in Linthicum Heights, Maryland and requires an active TS/SCI clearance.

Develop, integrate, test, secure, deploy, and maintain enterprise software applications supporting the United States Air Force. Responsibilities include API and data-interface development, CI/CD pipeline management, IaC and CaC automation, cloud and on-premises integration, vulnerability remediation, monitoring, troubleshooting, configuration management, RMF/ATO documentation, and support for approved AI capabilities.

Provision, configure, patch, and troubleshoot Linux and Kubernetes infrastructure across on-premises, cloud, and hybrid environments. Develop IaC, CaC, scripts, and CI/CD pipelines for automated deployments and secure configuration changes. Implement STIGs, access controls, vulnerability remediation, monitoring, logging, and alerting. Support RMF and ATO evidence, configuration management, incident response, capacity planning, recovery procedures, technical documentation, and operational runbooks.

Assess cryptographic implementations, key management, certificates, authentication, and secure integrations across on-premises, cloud, and hybrid systems. Evaluate vulnerabilities, configuration weaknesses, risks, and lifecycle dependencies; provide remediation recommendations and technical evidence for RMF, ATO, and continuous ATO activities. Support incident investigations, DevSecOps security checks, modernization efforts, and government-approved security architecture reviews while preparing technical assessments, procedures, and briefings.

Develops and maintains Crestron control programs and user interfaces for Air Force audiovisual and video conferencing systems. Responsibilities include integrating VTC endpoints, displays, and audio equipment; testing and debugging control systems; coordinating network and security dependencies; managing versioned source code and releases; supporting service requests; documenting incidents and procedures; and assisting with approved deployments, vulnerability remediation, and lifecycle improvements.

Develops and evaluates machine learning models for United States Air Force mission problems. Responsibilities include data preparation, feature engineering, statistical analysis, model training and validation, performance monitoring, data governance, DevSecOps, compliance documentation, and dashboard development. Collaborates with government stakeholders, engineers, cybersecurity personnel, architects, and mission users while maintaining auditable model lifecycle records and adhering to TS/SCI security requirements.

Develop and maintain backend SharePoint solutions for the U.S. Air Force, including repository structures, integrations, APIs, workflows, data synchronization, metadata, access controls, and reporting interfaces. Implement testing, CI/CD, configuration management, logging, monitoring, secure coding, and vulnerability remediation. Prepare technical documentation and evidence for RMF and ATO activities while troubleshooting deployed solutions and supporting authorized government requirements.

Administer ACAS and enterprise vulnerability scanning capabilities for USAF networks and applications. Configure credentialed scans, maintain asset coverage, analyze and validate findings, coordinate remediation, and verify closure through follow-up scans. Prepare weekly vulnerability reports, support STIG remediation, secure configuration management, CI/CD and Infrastructure as Code security processes, and provide evidence for RMF and ATO activities. Coordinate with NOC, SOC, incident response, system owners, and technical teams to address urgent vulnerabilities and potential compromises.

Provides Tier 1 and assigned Tier 2 technical support for USAF enterprise users. Responsibilities include troubleshooting systems, applications, networks, infrastructure, video, and telecommunications; managing tickets and escalations; maintaining knowledge articles and procedures; supporting onboarding, monitoring, identity and access activities; documenting resolutions; collecting service desk metrics; and escalating security incidents.

Develops, integrates, tests, deploys, and maintains enterprise application software supporting the United States Air Force. Responsibilities include API and data-interface development, CI/CD pipeline maintenance, IaC and CaC automation, secure coding, vulnerability remediation, application monitoring, troubleshooting, configuration management, and documentation. The role supports RMF, ATO, STIG compliance, incident response, technical debt remediation, and approved AI capability integration across cloud and on-premises environments.

Administers and secures enterprise network infrastructure supporting the United States Air Force. Responsibilities include configuring routers, switches, firewalls, and cabling; monitoring performance and security; resolving incidents; implementing patches, STIGs, and approved changes; maintaining network documentation and inventory; supporting cloud and hybrid connectivity; coordinating vulnerability remediation and incident response; and providing evidence for RMF and ATO compliance.

Data Engineer supporting a United States Air Force program. Responsibilities include designing ETL pipelines, data warehouses and lakes, APIs, data quality controls, metadata and lineage practices, analytical datasets, security controls, automated deployments, monitoring, troubleshooting, and technical documentation. The role collaborates with government stakeholders, mission partners, technical teams, and data scientists while maintaining compliance with approved architectures, governance standards, and security boundaries.

Provides technical advisory support to the U.S. Air Force by evaluating enterprise IT and cybersecurity solutions, architecture, cloud and data strategies, modernization options, technical debt, lifecycle costs, and interoperability. Develops trade studies, feasibility assessments, risk analyses, build/buy recommendations, and technical roadmaps. Advises on DevSecOps, CI/CD, Zero Trust, RMF, authorization boundaries, and secure integration while preparing technical briefs and coordinating with mission partners.

Manages enterprise configuration items, baselines, version histories, change records, and release processes for a USAF-supported program. Develops configuration management plans, coordinates technical and cybersecurity change reviews, verifies testing and authorization, and maintains traceability across DevSecOps, Infrastructure as Code, and Configuration as Code workflows. Reconciles records with inventories and live systems, tracks STIG remediation and vulnerabilities, and provides evidence for RMF, ATO, compliance, and government reporting.

Designs and maintains enterprise cloud and hybrid architectures supporting U.S. Air Force missions. Assesses workloads, dependencies, security boundaries, and modernization options; develops migration plans, integration designs, IaC and CI/CD architecture patterns, monitoring strategies, and resilient solutions across classified and unclassified environments. Supports RMF, ATO, cybersecurity integration, technical trade studies, cost analysis, architecture documentation, change control, and Government reviews while guiding engineering teams toward secure, approved deployments.

Develop and maintain USAF enterprise, cloud, data, and modernization architectures. Create DoDAF views, target architectures, integration designs, transition roadmaps, and technical debt analyses across classified and unclassified environments. Guide DevSecOps, Zero Trust, RMF, ATO, configuration management, interoperability, and cross-domain integration. Support portfolio governance, investment planning, trade studies, and modernization decisions while coordinating multidisciplinary teams and briefing technical and executive stakeholders.

Manage and analyze enterprise IT and cybersecurity requirements for USAF modernization initiatives. Translate mission and business needs into technical, security, interface, and operational requirements; maintain traceability and baselines; facilitate stakeholder workshops; conduct gap analyses, feasibility studies, trade studies, and COTS/GOTS assessments; support architecture alignment, governance, roadmap development, verification, and DevSecOps implementation.

Implement and operate secure cloud and hybrid infrastructure supporting USAF mission requirements. Provision servers, develop Infrastructure as Code and CI/CD pipelines, automate security controls and STIGs, monitor cloud environments, remediate vulnerabilities, and support RMF/ATO activities. Integrate cloud services with on-premises systems, maintain authorization boundaries, provide technical documentation and evidence, support migrations and incident response, and coordinate deployments with cybersecurity, NOC, SOC, and other technical teams.

Administers enterprise database environments for a U.S. Air Force program, including installation, configuration, monitoring, performance tuning, backups, recovery, permissions, patching, security controls, documentation, and incident support. Supports data warehouse and data lake environments, ETL integrations, reporting platforms, data quality, DevSecOps deployments, RMF assessments, ATO activities, continuity planning, and recovery testing. Coordinates database operations and outages with application, infrastructure, cybersecurity, and service desk teams.