What are the responsibilities and job description for the USAF - Cryptologist position at cFocus Software Incorporated?
cFocus Software seeks a Cryptologist to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience applying cryptographic principles to enterprise information protection and secure systems.
- Knowledge of symmetric and asymmetric cryptography, hashing, digital signatures, and authentication.
- Experience assessing cryptographic implementations, key management practices, and certificate trust.
- Ability to evaluate technical risks, interoperability, configuration weaknesses, and lifecycle dependencies.
- Ability to conduct authorized technical evaluations and produce reproducible assessment evidence.
- Understanding of secure cloud and hybrid integration, authorization boundaries, and configuration control.
- Working knowledge of RMF, security control assessment, and documentation supporting ATO processes.
- Strong analytical, technical writing, briefing, and multidisciplinary collaboration skills
- Analyze mission and system requirements to identify cryptographic protection needs for approved data, applications, communications, and infrastructure.
- Assess cryptographic implementations and configurations for alignment with Government-approved security architecture, policies, and applicable control requirements.
- Evaluate use of encryption, hashing, digital signatures, and authentication mechanisms; document assumptions, limitations, and implementation risks.
- Support reviews of key management practices, including generation, storage, distribution, rotation, revocation, and recovery within approved processes.
- Assess certificate and trust relationships supporting secure communications and system integration; coordinate corrective recommendations with responsible administrators.
- Support secure integration across on-premises, cloud, and hybrid systems, observing approved authorization boundaries and cross-domain requirements.
- Evaluate cryptographic dependencies in proposed designs and modernization efforts; advise on interoperability, lifecycle support, and migration impacts.
- Coordinate with mission partners and engineering teams on protection requirements supporting approved Automated Data Obfuscation capabilities.
- Conduct authorized technical evaluations of cryptographic controls and workflows; document methods, findings, and recommended remediation.
- Support vulnerability analysis, secure configuration reviews, and verification of approved patches or changes affecting cryptographic capabilities.
- Provide technical evidence and documentation to ISSO/ISSM teams for Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities.
- Research emerging cryptographic technologies and cybersecurity best practices; assess benefits, risks, compatibility, and implementation prerequisites.
- Support incident investigation involving cryptographic services or suspected key or certificate compromise under Government-approved response procedures.
- Coordinate approved cryptographic security checks and configuration controls within DevSecOps pipelines and centralized change management processes.
- Prepare technical assessments, procedures, and decision briefs; communicate findings and recommendations to Government stakeholders and technical teams.