USAF - Configuration Manager

cFocus Software Incorporated; Linthicum (MD); On-site; USD 130,000 - 170,000; Full time

Job summary

cFocus Software seeks a Configuration Manager to join our USAF program. This on-site role is located in Linthicum Heights, MD and requires an active TS/SCI clearance. You will lead configuration management across DoD networks, maintain baselines, and ensure traceability from requests through deployment.

You will collaborate with DevSecOps teams, coordinate change control with vendors, manage records and RMF/ATO support, and produce documentation for audits and government reporting.

Qualifications

• Active TS/SCI clearance.
• B.S. in Computer Science, Information Technology, or a related field.
• Experience managing enterprise configuration items, baselines, version histories, and change records.
• Ability to implement configuration management plans, procedures, and tools across organizations.
• Experience with change control, impact analysis, release readiness, testing evidence, and status reporting.
• Working knowledge of DevSecOps, CI/CD, version control, Infrastructure as Code, and Configuration as Code workflows.
• Ability to reconcile configuration records with inventories, documentation, and live configurations.
• Understanding of secure configuration baselines, STIGs, vulnerability remediation, and configuration evidence supporting RMF and ATO activities.
• Strong analytical, documentation, and communication skills for coordinating teams and stakeholders.

Responsibilities

• Implement and operate the configuration management system used to document and track system and software changes under the Government-approved Configuration Management Plan.
• Develop and maintain the CADO-IS Configuration Management Plan, including processes, procedures, and tools for baseline configuration items across participating organizations.
• Establish and maintain configuration item identification, baseline records, version histories, ownership, relationships, and change status for assigned components, systems, and capabilities.
• Manage CADO-IS configuration processes across Defense Cyber Operations Panel member organizations, Defense Forensic and Cyber Activities subpanel members, and other designated stakeholders.
• Coordinate the CODE formal configuration change control process, including third-party vendor changes. Route proposed changes for technical, operational, cybersecurity, and Government review as applicable.
• Maintain change records documenting affected configuration items, dependencies, risk and impact assessments, approvals, testing, implementation results, and recovery or rollback information.
• Coordinate releases and updates under Government-approved schedules and procedures. Verify required testing and Government authorization before production deployment.
• Track and document repairs, changes, additions, and removals through the Government-approved DevSecOps process; preserve traceability from the request to the deployed configuration.
• Coordinate Infrastructure as Code and Configuration as Code change control in a centralized repository, including automated cybersecurity evaluation before production deployment.
• Work with DevSecOps teams to maintain versioned pipeline artifacts and configuration consistency across on-premises, cloud, and hybrid networks.
• Reconcile configuration records with live system configurations, network diagrams, and approved baselines; identify discrepancies and coordinate corrective action with responsible technical teams.
• Support secure configuration management and patching by tracking approved security baseline changes, STIG remediation, and vulnerability-related configuration updates.
• Coordinate with asset management personnel to reconcile configuration items with hardware and software inventory data, discovery results, and lifecycle changes.
• Provide configuration records and change evidence supporting RMF, ATO or continuous ATO activities, compliance reviews, and Government reporting.
• Maintain configuration procedures and user guidance, brief stakeholders on change status and risks, and support training on approved configuration management processes.

Skills

Active TS/SCI clearance

Configuration management experience

Plan, procedures, and tools

Change control and testing evidence

DevSecOps & CI/CD

Configuration records reconciliation

RMF/ATO awareness

Analytical & communication skills

Education

B.S. Computer Science/Information Technology or related field

Job description

cFocus Software seeks a Configuration Manager to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience managing enterprise configuration items, baselines, version histories, and change records.
• Ability to implement configuration management plans, procedures, and tools across organizations.
• Experience with change control, impact analysis, release readiness, testing evidence, and status reporting.
• Working knowledge of DevSecOps, CI/CD, version control, Infrastructure as Code, and Configuration as Code workflows.
• Ability to reconcile configuration records with inventories, documentation, and live configurations.
• Understanding of secure configuration baselines, STIGs, vulnerability remediation, and configuration evidence supporting RMF and ATO activities.
• Strong analytical, documentation, and communication skills for coordinating teams and stakeholders.

Duties

• Implement and operate the configuration management system used to document and track system and software changes under the Government-approved Configuration Management Plan.
• Develop and maintain the Collect, Analyze, Disseminate, Operationalize-Integrated Solution (CADO-IS) Configuration Management Plan, including processes, procedures, and tools for baseline configuration items across participating organizations.
• Establish and maintain configuration item identification, baseline records, version histories, ownership, relationships, and change status for assigned components, systems, and capabilities.
• Manage CADO-IS configuration processes across Defense Cyber Operations Panel member organizations, Defense Forensic and Cyber Activities subpanel members, and other designated stakeholders.
• Coordinate the CODE formal configuration change control process, including third-party vendor changes. Route proposed changes for technical, operational, cybersecurity, and Government review as applicable.
• Maintain change records documenting affected configuration items, dependencies, risk and impact assessments, approvals, testing, implementation results, and recovery or rollback information.
• Coordinate releases and updates under Government-approved schedules and procedures. Verify required testing and Government authorization before production deployment.
• Track and document repairs, changes, additions, and removals through the Government-approved DevSecOps process; preserve traceability from the request to the deployed configuration.
• Coordinate Infrastructure as Code and Configuration as Code change control in a centralized repository, including automated cybersecurity evaluation before production deployment.
• Work with DevSecOps teams to maintain versioned pipeline artifacts and configuration consistency across on-premises, cloud, and hybrid networks.
• Reconcile configuration records with live system configurations, network diagrams, and approved baselines; identify discrepancies and coordinate corrective action with responsible technical teams.
• Support secure configuration management and patching by tracking approved security baseline changes, STIG remediation, and vulnerability-related configuration updates.
• Coordinate with asset management personnel to reconcile configuration items with hardware and software inventory data, discovery results, and lifecycle changes.
• Provide configuration records and change evidence supporting RMF, ATO or continuous ATO activities, compliance reviews, and Government reporting.
• Maintain configuration procedures and user guidance, brief stakeholders on change status and risks, and support training on approved configuration management processes.