USAF - Cryptologist

c. Focus Software seeks a Cryptologist to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.

Qualifications

Active TS/SCI clearance B.S. Computer Science, Information Technology, or a related field Experience applying cryptographic principles to enterprise information protection and secure systems. Knowledge of symmetric and asymmetric cryptography, hashing, digital signatures, and authentication. Experience assessing cryptographic implementations, key management practices, and certificate trust.

Ability to evaluate technical risks, interoperability, configuration weaknesses, and lifecycle dependencies. Ability to conduct authorized technical evaluations and produce reproducible assessment evidence. Understanding of secure cloud and hybrid integration, authorization boundaries, and configuration control. Working knowledge of RMF, security control assessment, and documentation supporting ATO processes.

Strong analytical, technical writing, briefing, and multidisciplinary collaboration skills Duties: Analyze mission and system requirements to identify cryptographic protection needs for approved data, applications, communications, and infrastructure. Assess cryptographic implementations and configurations for alignment with Government-approved security architecture, policies, and applicable control requirements.

Evaluate use of encryption, hashing, digital signatures, and authentication mechanisms; document assumptions, limitations, and implementation risks. Support reviews of key management practices, including generation, storage, distribution, rotation, revocation, and recovery within approved processes. Assess certificate and trust relationships supporting secure communications and system integration; coordinate corrective recommendations with responsible administrators.

Support secure integration across on-premises, cloud, and hybrid systems, observing approved authorization boundaries and cross-domain requirements. Evaluate cryptographic dependencies in proposed designs and modernization efforts; advise on interoperability, lifecycle support, and migration impacts. Coordinate with mission partners and engineering teams on protection requirements supporting approved Automated Data Obfuscation capabilities.

Conduct authorized technical evaluations of cryptographic controls and workflows; document methods, findings, and recommended remediation. Support vulnerability analysis, secure configuration reviews, and verification of approved patches or changes affecting cryptographic capabilities. Provide technical evidence and documentation to ISSO/ISSM teams for Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities.

Research emerging cryptographic technologies and cybersecurity best practices; assess benefits, risks, compatibility, and implementation prerequisites. Support incident investigation involving cryptographic services or suspected key or certificate compromise under Government-approved response procedures. Coordinate approved cryptographic security checks and configuration controls within Dev.

Sec. Ops pipelines and centralized change management processes. Prepare technical assessments, procedures, and decision briefs; communicate findings and recommendations to Government stakeholders and technical teams.