The Role
Manages enterprise configuration items, baselines, version histories, change records, and release processes for a USAF-supported program. Develops configuration management plans, coordinates technical and cybersecurity change reviews, verifies testing and authorization, and maintains traceability across DevSecOps, Infrastructure as Code, and Configuration as Code workflows. Reconciles records with inventories and live systems, tracks STIG remediation and vulnerabilities, and provides evidence for RMF, ATO, compliance, and government reporting.
Summary Generated by Built In
cFocus Software seeks a Configuration Manager to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience managing enterprise configuration items, baselines, version histories, and change records.
- Ability to implement configuration management plans, procedures, and tools across organizations.
- Experience with change control, impact analysis, release readiness, testing evidence, and status reporting.
- Working knowledge of DevSecOps, CI/CD, version control, Infrastructure as Code, and Configuration as Code workflows.
- Ability to reconcile configuration records with inventories, documentation, and live configurations.
- Understanding of secure configuration baselines, STIGs, vulnerability remediation, and configuration evidence supporting RMF and ATO activities.
- Strong analytical, documentation, and communication skills for coordinating teams and stakeholders.
- Implement and operate the configuration management system used to document and track system and software changes under the Government-approved Configuration Management Plan.
- Develop and maintain the Collect, Analyze, Disseminate, Operationalize-Integrated Solution (CADO-IS) Configuration Management Plan, including processes, procedures, and tools for baseline configuration items across participating organizations.
- Establish and maintain configuration item identification, baseline records, version histories, ownership, relationships, and change status for assigned components, systems, and capabilities.
- Manage CADO-IS configuration processes across Defense Cyber Operations Panel member organizations, Defense Forensic and Cyber Activities subpanel members, and other designated stakeholders.
- Coordinate the CODE formal configuration change control process, including third-party vendor changes. Route proposed changes for technical, operational, cybersecurity, and Government review as applicable.
- Maintain change records documenting affected configuration items, dependencies, risk and impact assessments, approvals, testing, implementation results, and recovery or rollback information.
- Coordinate releases and updates under Government-approved schedules and procedures. Verify required testing and Government authorization before production deployment.
- Track and document repairs, changes, additions, and removals through the Government-approved DevSecOps process; preserve traceability from the request to the deployed configuration.
- Coordinate Infrastructure as Code and Configuration as Code change control in a centralized repository, including automated cybersecurity evaluation before production deployment.
- Work with DevSecOps teams to maintain versioned pipeline artifacts and configuration consistency across on-premises, cloud, and hybrid networks.
- Reconcile configuration records with live system configurations, network diagrams, and approved baselines; identify discrepancies and coordinate corrective action with responsible technical teams.
- Support secure configuration management and patching by tracking approved security baseline changes, STIG remediation, and vulnerability-related configuration updates.
- Coordinate with asset management personnel to reconcile configuration items with hardware and software inventory data, discovery results, and lifecycle changes.
- Provide configuration records and change evidence supporting RMF, ATO or continuous ATO activities, compliance reviews, and Government reporting.
- Maintain configuration procedures and user guidance, brief stakeholders on change status and risks, and support training on approved configuration management processes.
Skills Required
- Active TS/SCI security clearance
- Bachelor of Science in Computer Science, Information Technology, or a related field
- Experience managing enterprise configuration items, baselines, version histories, and change records
- Ability to implement configuration management plans, procedures, and tools across organizations
- Experience with change control, impact analysis, release readiness, testing evidence, and status reporting
- Working knowledge of DevSecOps, CI/CD, version control, Infrastructure as Code, and Configuration as Code workflows
- Ability to reconcile configuration records with inventories, documentation, and live configurations
- Understanding of secure configuration baselines, STIGs, vulnerability remediation, and configuration evidence supporting RMF and ATO activities
- Strong analytical, documentation, and communication skills
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Established in 2006, cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint. cFocus Software is the exclusive vendor of ATO (Authority To Operate) as a Service™, which automates FedRAMP compliance for the Azure Government Cloud and Office 365. Contact Us for a demo of ATO as a Service™ or a FREE government chatbot proof of concept project today!
