Senior Configuration Management Specialist

National Student Clearinghouse; Herndon (VA); A distancia; USD 110.000 - 160.000; Jornada completa

Descripción de la vacante

National Student Clearinghouse is seeking a Senior Configuration Management Specialist to lead enterprise CM governance, standards, and controls, ensuring secure and compliant software, infrastructure, and environments throughout the lifecycle.

The role partners with DevSecOps, Engineering, Information Security, QA, and Operations to drive audit readiness and regulatory compliance, including CMMC and NIST 800-171. Remote-first with periodic on-site as needed in Herndon area.

Formación

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field. A combination of education and experience including military service will also be considered.
• 6 years of direct and progressively responsible experience in configuration management, software configuration management, DevSecOps, systems engineering, software development lifecycle governance, infrastructure management, release management, information security, or a related technical discipline.
• Experience leading or administering enterprise configuration management programs, governance frameworks, or control environments.
• Experience establishing and maintaining configuration baselines, change controls, configuration records, and compliance documentation across complex technology environments.
• Experience supporting cybersecurity audits, regulatory assessments, compliance programs, or technology control frameworks.
• Experience working within Agile, DevSecOps, cloud, or modern software delivery environments.
• Experience leading, administering, or serving as the primary resource for configuration management controls within CMMC, NIST 800-171, FedRAMP, SOC, or similar cybersecurity compliance frameworks, including assessment preparation, audit readiness, remediation activities, control implementation, and evidence management.
• Strong knowledge of cybersecurity compliance frameworks, including configuration management requirements associated with CMMC, NIST 800-171, and related standards.

Responsabilidades

• Lead enterprise configuration management governance, standards, and controls across software, infrastructure, systems, environments, and documentation.
• Own and guide configuration management strategies, policies, governance processes, and control frameworks to ensure security and regulatory compliance.
• Lead audits, assessments, and compliance reviews to validate baseline integrity and evidence readiness.
• Provide expert consultation to DevSecOps, Engineering, Information Security, QA, and Operations teams on configuration management requirements and risk management.
• Develop and maintain configuration management plans, repositories, dashboards, and metrics to provide visibility into compliance and program maturity.
• Establish baselines and governance to ensure configuration items remain secure, traceable, and compliant.

Conocimientos

Configuration management

DevSecOps

Cloud environments

Agile

Audit readiness

Regulatory compliance

Educación

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or related field

Descripción del empleo

Senior Configuration Management Specialist

By joining the National Student Clearinghouse, you can be sure that the work you do now will help shape the future of education and the workforce in the U.S. As the trusted source for higher education data since 1993, the Clearinghouse is the leading provider of transcript and data exchange services, automated enrollment and degree verifications, learner insights and research, and compliance solutions for schools, businesses, and learners nationwide. As a 501(c)(3) nonprofit organization, the Clearinghouse works with nearly 3,600 postsecondary institutions to meet their compliance needs and with thousands of high schools and districts to provide continuing collegiate enrollment, progression, and completion statistics about their alumni. In addition, the Research Center publications inform policymakers and business leaders about student educational pathways. Using our unique combination of data, analytics, and software to drive our mission, security and privacy is paramount. Join us as we continue to invest in our talent and new advanced technologies to unlock the power of data on behalf of all learners.

About the Role:

The Senior Specialist, Configuration Management (known externally as Senior Configuration Management Specialist) serves as the organization's subject matter expert and functional owner for configuration management practices, governance, and compliance. This role is responsible for establishing, governing, and continuously enhancing configuration management processes that ensure the integrity, security, consistency, traceability, and control of software, infrastructure, systems, environments, and associated technical documentation throughout the system development lifecycle.

Working closely with DevSecOps, Engineering, Information Security, Quality Assurance, Operations, and other technology stakeholders, this role leads enterprise configuration management governance, establishes organizational standards and controls, identifies and mitigates configuration-related risk, and drives compliance with internal policies and external regulatory requirements.
The Senior Specialist is accountable for the organization's configuration management control domain supporting CMMC, NIST 800-171, and related cybersecurity frameworks. This includes ownership of configuration management practices, supporting documentation, evidence management, audit readiness activities, remediation efforts, and ongoing compliance necessary to achieve and sustain regulatory and cybersecurity requirements.

This role serves as a trusted advisor to technology leadership and governance teams, ensuring configuration management capabilities effectively support secure software delivery, operational resilience, audit readiness, and organizational cybersecurity objectives.

Currently, this is a remote-first position, and this position may be required to periodically work on-site at our office and the frequency would depend on the department/division's requirements. Therefore, candidates must either reside within a reasonable distance to commute to our office or be willing to travel to our office in Herndon, when required.

How You Contribute:

• Demonstrate the Clearinghouse's core competencies: Customer Focus, Optimizes Work Processes, Collaborates, Communicates Effectively, and Be Open and Authentic.
• Lead the organization's configuration management program and strategy, ensuring configuration management practices effectively support software development, infrastructure management, cybersecurity, operational resilience, and compliance objectives.
• Serve as the organizational owner and primary subject matter expert for configuration management controls supporting CMMC, NIST 800-171, and related cybersecurity frameworks, accountable for establishing, maintaining, and continuously improving configuration management practices necessary to achieve and sustain compliance.
• Lead assessment readiness, audit preparation, evidence management, remediation planning, control implementation, and ongoing compliance activities associated with configuration management requirements.
• Develop, implement, govern, and continuously enhance enterprise configuration management standards, policies, procedures, governance processes, and control frameworks across software, infrastructure, systems, environments, and technical documentation.
• Establish and maintain enterprise configuration baselines and governance processes to ensure configuration items remain secure, controlled, traceable, and aligned with organizational and regulatory requirements.
• Evaluate existing configuration management practices, identify strategic risks, control weaknesses, process gaps, and compliance concerns, and lead cross-functional remediation efforts to strengthen control effectiveness and ensure ongoing compliance.
• Lead configuration audits, assessments, and compliance reviews to validate baseline integrity, control effectiveness, audit readiness, and adherence to established standards and requirements.
• Provide expert consultation and guidance to DevSecOps, Engineering, Information Security, Quality Assurance, Operations, and project teams regarding configuration management requirements, governance, risk management, and best practices.
• Lead configuration governance activities, including participation in and support of Change Advisory Boards (CABs), Configuration Control Boards (CCBs), and other technical governance forums.
• Develop and maintain configuration management plans, repositories, status accounting records, dashboards, metrics, reporting, and supporting documentation that provide visibility into compliance, control effectiveness, and overall program maturity.
• Establish, monitor, and report configuration management compliance metrics, audit findings, remediation progress, and control effectiveness measures to technology leadership and governance stakeholders.
• Analyze proposed changes to systems, applications, infrastructure, and environments to identify configuration-related risks and ensure impacts are appropriately assessed prior to implementation.
• Partner with organizational leadership to establish long-term configuration management objectives, roadmaps, and improvement initiatives that strengthen cybersecurity posture, operational stability, and regulatory compliance.
• Maintain ongoing audit readiness and compliance following assessments by proactively monitoring configuration management controls, documentation, baselines, evidence repositories, and corrective actions.
• Mentor technical teams and stakeholders on configuration management principles, governance requirements, compliance expectations, and industry best practices.

Position may be required to perform other duties as required.

These essential functions are representative of those that must be met by an employee to successfully perform the job. Reasonable accommodations will be made to enable individuals with disabilities to perform these essential functions.

What You Bring to the Table:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field. A combination of education and experience including military service will also be considered.
• 6 years of of direct and progressively responsible experience in configuration management, software configuration management, DevSecOps, systems engineering, software development lifecycle governance, infrastructure management, release management, information security, or a related technical discipline.
• Experience leading or administering enterprise configuration management programs, governance frameworks, or control environments.
• Experience establishing and maintaining configuration baselines, change controls, configuration records, and compliance documentation across complex technology environments.
• Experience supporting cybersecurity audits, regulatory assessments, compliance programs, or technology control frameworks.
• Experience working within Agile, DevSecOps, cloud, or modern software delivery environments.
• Experience leading, administering, or serving as the primary resource for configuration management controls within CMMC, NIST 800-171, FedRAMP, SOC, or similar cybersecurity compliance frameworks, including assessment preparation, audit readiness, remediation activities, control implementation, and evidence management.
• Advanced knowledge of configuration management principles, methodologies, governance practices, and industry standards.
• Advanced knowledge of software development lifecycle, DevSecOps, release management, infrastructure management, and technology governance practices.
• Strong knowledge of cybersecurity compliance frameworks, including configuration management requirements associated with CMMC, NIST 800-171, and related standards.
• Ability to lead enterprise-wide configuration management initiatives and drive cross-functional process improvements.
• Ability to identify, assess, prioritize, and mitigate configuration management risks affecting security, compliance, operational stability, and system integrity.
• Ability to develop configuration management strategies, standards, policies, governance processes, and control frameworks.
• Ability to independently analyze complex technical and compliance issues and develop practical solutions.
• Ability to influence stakeholders and drive alignment across technical teams, governance bodies, and leadership groups without direct supervisory authority.
• Ability to establish accountability, coordinate remediation efforts, and drive adoption of configuration management controls across multiple functional areas.
• Ability to lead audits and assessments through preparation of documentation, configuration evidence, control validation, and traceability records.
• Strong analytical, organizational, problem-solving, and