USAF - Cryptologist

cFocus Software Incorporated; Linthicum (MD); On-site; USD 150,000 - 195,000; Full time

Job summary

cFocus Software Incorporated seeks a Cryptologist to join our program supporting the USAF. This on-site role in Linthicum Heights, MD requires an Active TS/SCI clearance.

The position focuses on cryptographic protection across data, applications, and infrastructure, with emphasis on secure cloud/hybrid integration and RMF/ATO processes. The candidate will analyze system requirements, evaluate cryptographic implementations, and document findings for government stakeholders.

Qualifications

• Active TS/SCI clearance required.
• B.S. Computer Science, Information Technology, or a related field.
• Experience applying cryptographic principles to protect enterprise information and secure systems.
• Knowledge of symmetric/asymmetric cryptography, hashing, digital signatures, and authentication.
• Experience assessing cryptographic implementations, key management, and certificate trust.
• Ability to evaluate risks, interoperability, configuration weaknesses, and lifecycle dependencies.
• Ability to conduct authorized technical evaluations and produce reproducible evidence.
• Understanding of secure cloud and hybrid integration, authorization boundaries, and configuration control.
• Working knowledge of RMF, security control assessment, and documentation supporting ATO processes.
• Strong analytical, technical writing, briefing, and multidisciplinary collaboration skills.

Responsibilities

• Analyze mission and system requirements to identify cryptographic protection needs for data, applications, communications, and infrastructure.
• Assess cryptographic implementations and configurations for alignment with government security architecture and control requirements.
• Evaluate usage of encryption, hashing, digital signatures, and authentication mechanisms; document assumptions, limitations, and risks.
• Support reviews of key management practices, including generation, storage, distribution, rotation, revocation, and recovery.
• Assess certificate and trust relationships supporting secure communications and system integration; coordinate corrective recommendations.
• Support secure integration across on-premises, cloud, and hybrid systems with approved boundaries and cross-domain requirements.
• Evaluate cryptographic dependencies in proposed designs and modernization efforts; advise on interoperability and lifecycle support.
• Coordinate approved cryptographic security checks within DevSecOps pipelines and change management processes.
• Prepare technical assessments, procedures, and decision briefs; communicate findings to government stakeholders and technical teams.
• Research emerging cryptographic technologies and best practices; assess benefits, risks, and implementation prerequisites.
• Support incident investigations involving cryptographic services or suspected key/certificate compromise.

Skills

TS/SCI clearance

Cryptography expertise

RMF knowledge

Technical writing

Analytical thinking

Education

B.S. Computer Science or related field

Job description

cFocus Software seeks a Cryptologist to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience applying cryptographic principles to enterprise information protection and secure systems.
• Knowledge of symmetric and asymmetric cryptography, hashing, digital signatures, and authentication.
• Experience assessing cryptographic implementations, key management practices, and certificate trust.
• Ability to evaluate technical risks, interoperability, configuration weaknesses, and lifecycle dependencies.
• Ability to conduct authorized technical evaluations and produce reproducible assessment evidence.
• Understanding of secure cloud and hybrid integration, authorization boundaries, and configuration control.
• Working knowledge of RMF, security control assessment, and documentation supporting ATO processes.
• Strong analytical, technical writing, briefing, and multidisciplinary collaboration skills

Duties:

• Analyze mission and system requirements to identify cryptographic protection needs for approved data, applications, communications, and infrastructure.
• Assess cryptographic implementations and configurations for alignment with Government-approved security architecture, policies, and applicable control requirements.
• Evaluate use of encryption, hashing, digital signatures, and authentication mechanisms; document assumptions, limitations, and implementation risks.
• Support reviews of key management practices, including generation, storage, distribution, rotation, revocation, and recovery within approved processes.
• Assess certificate and trust relationships supporting secure communications and system integration; coordinate corrective recommendations with responsible administrators.
• Support secure integration across on-premises, cloud, and hybrid systems, observing approved authorization boundaries and cross-domain requirements.
• Evaluate cryptographic dependencies in proposed designs and modernization efforts; advise on interoperability, lifecycle support, and migration impacts.
• Coordinate with mission partners and engineering teams on protection requirements supporting approved Automated Data Obfuscation capabilities.
• Conduct authorized technical evaluations of cryptographic controls and workflows; document methods, findings, and recommended remediation.
• Support vulnerability analysis, secure configuration reviews, and verification of approved patches or changes affecting cryptographic capabilities.
• Provide technical evidence and documentation to ISSO/ISSM teams for Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities.
• Research emerging cryptographic technologies and cybersecurity best practices; assess benefits, risks, compatibility, and implementation prerequisites.
• Support incident investigation involving cryptographic services or suspected key or certificate compromise under Government-approved response procedures.
• Coordinate approved cryptographic security checks and configuration controls within DevSecOps pipelines and centralized change management processes.
• Prepare technical assessments, procedures, and decision briefs; communicate findings and recommendations to Government stakeholders and technical teams.