USAF - Configuration Manager
cFocus Software Incorporated · Linthicum Heights, MD ·
- Category
- Management
cFocus Software seeks a Configuration Manager to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
Qualifications:
- Active TS/SCI clearance
- B.S. Computer Science, Information Technology, or a related field
- Experience managing enterprise configuration items, baselines, version histories, and change records.
- Ability to implement configuration management plans, procedures, and tools across organizations.
- Experience with change control, impact analysis, release readiness, testing evidence, and status reporting.
- Working knowledge of DevSecOps, CI/CD, version control, Infrastructure as Code, and Configuration as Code workflows.
- Ability to reconcile configuration records with inventories, documentation, and live configurations.
- Understanding of secure configuration baselines, STIGs, vulnerability remediation, and configuration evidence supporting RMF and ATO activities.
- Strong analytical, documentation, and communication skills for coordinating teams and stakeholders.
- Implement and operate the configuration management system used to document and track system and software changes under the Government-approved Configuration Management Plan.
- Develop and maintain the Collect, Analyze, Disseminate, Operationalize-Integrated Solution (CADO-IS) Configuration Management Plan, including processes, procedures, and tools for baseline configuration items across participating organizations.
- Establish and maintain configuration item identification, baseline records, version histories, ownership, relationships, and change status for assigned components, systems, and capabilities.
- Manage CADO-IS configuration processes across Defense Cyber Operations Panel member organizations, Defense Forensic and Cyber Activities subpanel members, and other designated stakeholders.
- Coordinate the CODE formal configuration change control process, including third-party vendor changes. Route proposed changes for technical, operational, cybersecurity, and Government review as applicable.
- Maintain change records documenting affected configuration items, dependencies, risk and impact assessments, approvals, testing, implementation results, and recovery or rollback information.
- Coordinate releases and updates under Government-approved schedules and procedures. Verify required testing and Government authorization before production deployment.
- Track and document repairs, changes, additions, and removals through the Government-approved DevSecOps process; preserve traceability from the request to the deployed configuration.
- Coordinate Infrastructure as Code and Configuration as Code change control in a centralized repository, including automated cybersecurity evaluation before production deployment.
- Work with DevSecOps teams to maintain versioned pipeline artifacts and configuration consistency across on-premises, cloud, and hybrid networks.
- Reconcile configuration records with live system configurations, network diagrams, and approved baselines; identify discrepancies and coordinate corrective action with responsible technical teams.
- Support secure configuration management and patching by tracking approved security baseline changes, STIG remediation, and vulnerability-related configuration updates.
- Coordinate with asset management personnel to reconcile configuration items with hardware and software inventory data, discovery results, and lifecycle changes.
- Provide configuration records and change evidence supporting RMF, ATO or continuous ATO activities, compliance reviews, and Government reporting.
- Maintain configuration procedures and user guidance, brief stakeholders on change status and risks, and support training on approved configuration management processes.