The Role
Assess cryptographic implementations, key management, certificates, authentication, and secure integrations across on-premises, cloud, and hybrid systems. Evaluate vulnerabilities, configuration weaknesses, risks, and lifecycle dependencies; provide remediation recommendations and technical evidence for RMF, ATO, and continuous ATO activities. Support incident investigations, DevSecOps security checks, modernization efforts, and government-approved security architecture reviews while preparing technical assessments, procedures, and briefings.
Summary Generated by Built In
cFocus Software seeks a Cryptologist to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience applying cryptographic principles to enterprise information protection and secure systems.
- Knowledge of symmetric and asymmetric cryptography, hashing, digital signatures, and authentication.
- Experience assessing cryptographic implementations, key management practices, and certificate trust.
- Ability to evaluate technical risks, interoperability, configuration weaknesses, and lifecycle dependencies.
- Ability to conduct authorized technical evaluations and produce reproducible assessment evidence.
- Understanding of secure cloud and hybrid integration, authorization boundaries, and configuration control.
- Working knowledge of RMF, security control assessment, and documentation supporting ATO processes.
- Strong analytical, technical writing, briefing, and multidisciplinary collaboration skills
- Analyze mission and system requirements to identify cryptographic protection needs for approved data, applications, communications, and infrastructure.
- Assess cryptographic implementations and configurations for alignment with Government-approved security architecture, policies, and applicable control requirements.
- Evaluate use of encryption, hashing, digital signatures, and authentication mechanisms; document assumptions, limitations, and implementation risks.
- Support reviews of key management practices, including generation, storage, distribution, rotation, revocation, and recovery within approved processes.
- Assess certificate and trust relationships supporting secure communications and system integration; coordinate corrective recommendations with responsible administrators.
- Support secure integration across on-premises, cloud, and hybrid systems, observing approved authorization boundaries and cross-domain requirements.
- Evaluate cryptographic dependencies in proposed designs and modernization efforts; advise on interoperability, lifecycle support, and migration impacts.
- Coordinate with mission partners and engineering teams on protection requirements supporting approved Automated Data Obfuscation capabilities.
- Conduct authorized technical evaluations of cryptographic controls and workflows; document methods, findings, and recommended remediation.
- Support vulnerability analysis, secure configuration reviews, and verification of approved patches or changes affecting cryptographic capabilities.
- Provide technical evidence and documentation to ISSO/ISSM teams for Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities.
- Research emerging cryptographic technologies and cybersecurity best practices; assess benefits, risks, compatibility, and implementation prerequisites.
- Support incident investigation involving cryptographic services or suspected key or certificate compromise under Government-approved response procedures.
- Coordinate approved cryptographic security checks and configuration controls within DevSecOps pipelines and centralized change management processes.
- Prepare technical assessments, procedures, and decision briefs; communicate findings and recommendations to Government stakeholders and technical teams.
Skills Required
- Active TS/SCI clearance
- Bachelor of Science degree in Computer Science, Information Technology, or a related field
- Experience applying cryptographic principles to enterprise information protection and secure systems
- Knowledge of symmetric and asymmetric cryptography, hashing, digital signatures, and authentication
- Experience assessing cryptographic implementations, key management practices, and certificate trust
- Ability to evaluate technical risks, interoperability, configuration weaknesses, and lifecycle dependencies
- Ability to conduct authorized technical evaluations and produce reproducible assessment evidence
- Understanding of secure cloud and hybrid integration, authorization boundaries, and configuration control
- Working knowledge of RMF, security control assessment, and documentation supporting ATO processes
- Strong analytical, technical writing, briefing, and multidisciplinary collaboration skills
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Established in 2006, cFocus Software automates FedRAMP compliance and develops government chatbots for the Azure Government Cloud, Office 365, and SharePoint. cFocus Software is the exclusive vendor of ATO (Authority To Operate) as a Service™, which automates FedRAMP compliance for the Azure Government Cloud and Office 365. Contact Us for a demo of ATO as a Service™ or a FREE government chatbot proof of concept project today!
