USAF - Configuration Manager

cFocus Software Incorporated•Linthicum Heights, MD

3d•Onsite

About The Position

cFocus Software is seeking a Configuration Manager to support the United States Air Force (USAF) program. This role is based on-site in Linthicum Heights, MD, and requires an active TS/SCI clearance. The Configuration Manager will be responsible for implementing and operating the configuration management system, developing and maintaining the CADO-IS Configuration Management Plan, and establishing and maintaining configuration item identification, baseline records, version histories, ownership, relationships, and change status for assigned components, systems, and capabilities. This role involves managing configuration processes across various Defense Cyber Operations Panel member organizations and stakeholders, coordinating the formal configuration change control process, and maintaining detailed change records. The position also includes coordinating releases and updates, tracking changes through the DevSecOps process, managing Infrastructure as Code and Configuration as Code changes, and ensuring versioned pipeline artifacts and configuration consistency across different network environments. Additionally, the Configuration Manager will reconcile configuration records with live system configurations, support secure configuration management and patching, coordinate with asset management, and provide configuration records and evidence for RMF, ATO, and compliance activities. The role also involves maintaining procedures, providing user guidance, briefing stakeholders, and supporting training on configuration management processes.

Requirements

Active TS/SCI clearance
B.S. Computer Science, Information Technology, or a related field
Experience managing enterprise configuration items, baselines, version histories, and change records.
Ability to implement configuration management plans, procedures, and tools across organizations.
Experience with change control, impact analysis, release readiness, testing evidence, and status reporting.
Working knowledge of DevSecOps, CI/CD, version control, Infrastructure as Code, and Configuration as Code workflows.
Ability to reconcile configuration records with inventories, documentation, and live configurations.
Understanding of secure configuration baselines, STIGs, vulnerability remediation, and configuration evidence supporting RMF and ATO activities.
Strong analytical, documentation, and communication skills for coordinating teams and stakeholders.

Responsibilities

Implement and operate the configuration management system used to document and track system and software changes under the Government-approved Configuration Management Plan.
Develop and maintain the Collect, Analyze, Disseminate, Operationalize-Integrated Solution (CADO-IS) Configuration Management Plan, including processes, procedures, and tools for baseline configuration items across participating organizations.
Establish and maintain configuration item identification, baseline records, version histories, ownership, relationships, and change status for assigned components, systems, and capabilities.
Manage CADO-IS configuration processes across Defense Cyber Operations Panel member organizations, Defense Forensic and Cyber Activities subpanel members, and other designated stakeholders.
Coordinate the CODE formal configuration change control process, including third-party vendor changes. Route proposed changes for technical, operational, cybersecurity, and Government review as applicable.
Maintain change records documenting affected configuration items, dependencies, risk and impact assessments, approvals, testing, implementation results, and recovery or rollback information.
Coordinate releases and updates under Government-approved schedules and procedures. Verify required testing and Government authorization before production deployment.
Track and document repairs, changes, additions, and removals through the Government-approved DevSecOps process; preserve traceability from the request to the deployed configuration.
Coordinate Infrastructure as Code and Configuration as Code change control in a centralized repository, including automated cybersecurity evaluation before production deployment.
Work with DevSecOps teams to maintain versioned pipeline artifacts and configuration consistency across on-premises, cloud, and hybrid networks.
Reconcile configuration records with live system configurations, network diagrams, and approved baselines; identify discrepancies and coordinate corrective action with responsible technical teams.
Support secure configuration management and patching by tracking approved security baseline changes, STIG remediation, and vulnerability-related configuration updates.
Coordinate with asset management personnel to reconcile configuration items with hardware and software inventory data, discovery results, and lifecycle changes.
Provide configuration records and change evidence supporting RMF, ATO or continuous ATO activities, compliance reviews, and Government reporting.
Maintain configuration procedures and user guidance, brief stakeholders on change status and risks, and support training on approved configuration management processes.