USAF - Configuration Manager

cFocus Software seeks a Configuration Manager to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications:

• Active TS/SCI clearance
• B.S. Computer Science, Information Technology, or a related field
• Experience managing enterprise configuration items, baselines, version histories, and change records.
• Ability to implement configuration management plans, procedures, and tools across organizations.
• Experience with change control, impact analysis, release readiness, testing evidence, and status reporting.
• Working knowledge of DevSecOps, CI/CD, version control, Infrastructure as Code, and Configuration as Code workflows.
• Ability to reconcile configuration records with inventories, documentation, and live configurations.
• Understanding of secure configuration baselines, STIGs, vulnerability remediation, and configuration evidence supporting RMF and ATO activities.
• Strong analytical, documentation, and communication skills for coordinating teams and stakeholders.

Duties:

• Implement and operate the configuration management system used to document and track system and software changes under the Government-approved Configuration Management Plan.
• Develop and maintain the Collect, Analyze, Disseminate, Operationalize-Integrated Solution (CADO-IS) Configuration Management Plan, including processes, procedures, and tools for baseline configuration items across participating organizations.
• Establish and maintain configuration item identification, baseline records, version histories, ownership, relationships, and change status for assigned components, systems, and capabilities.
• Manage CADO-IS configuration processes across Defense Cyber Operations Panel member organizations, Defense Forensic and Cyber Activities subpanel members, and other designated stakeholders.
• Coordinate the CODE formal configuration change control process, including third-party vendor changes. Route proposed changes for technical, operational, cybersecurity, and Government review as applicable.
• Maintain change records documenting affected configuration items, dependencies, risk and impact assessments, approvals, testing, implementation results, and recovery or rollback information.
• Coordinate releases and updates under Government-approved schedules and procedures. Verify required testing and Government authorization before production deployment.
• Track and document repairs, changes, additions, and removals through the Government-approved DevSecOps process; preserve traceability from the request to the deployed configuration.
• Coordinate Infrastructure as Code and Configuration as Code change control in a centralized repository, including automated cybersecurity evaluation before production deployment.
• Work with DevSecOps teams to maintain versioned pipeline artifacts and configuration consistency across on-premises, cloud, and hybrid networks.
• Reconcile configuration records with live system configurations, network diagrams, and approved baselines; identify discrepancies and coordinate corrective action with responsible technical teams.
• Support secure configuration management and patching by tracking approved security baseline changes, STIG remediation, and vulnerability-related configuration updates.
• Coordinate with asset management personnel to reconcile configuration items with hardware and software inventory data, discovery results, and lifecycle changes.
• Provide configuration records and change evidence supporting RMF, ATO or continuous ATO activities, compliance reviews, and Government reporting.
• Maintain configuration procedures and user guidance, brief stakeholders on change status and risks, and support training on approved configuration management processes.