cFocus Software seeks a Cryptologist to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance. Qualifications: • Active TS/SCI clearance • B.S. Computer Science, Information Technology, or a related field • Experience applying cryptographic principles to enterprise information protection and secure systems. • Knowledge of symmetric and asymmetric cryptography, hashing, digital signatures, and authentication. • Experience assessing cryptographic implementations, key management practices, and certificate trust. • Ability to evaluate technical risks, interoperability, configuration weaknesses, and lifecycle dependencies. • Ability to conduct authorized technical evaluations and produce reproducible assessment evidence. • Understanding of secure cloud and hybrid integration, authorization boundaries, and configuration control. • Working knowledge of RMF, security control assessment, and documentation supporting ATO processes. • Strong analytical, technical writing, briefing, and multidisciplinary collaboration skills Duties: • Analyze mission and system requirements to identify cryptographic protection needs for approved data, applications, communications, and infrastructure. • Assess cryptographic implementations and configurations for alignment with Government-approved security architecture, policies, and applicable control requirements. • Evaluate use of encryption, hashing, digital signatures, and authentication mechanisms; document assumptions, limitations, and implementation risks. • Support reviews of key management practices, including generation, storage, distribution, rotation, revocation, and recovery within approved processes. • Assess certificate and trust relationships supporting secure communications and system integration; coordinate corrective recommendations with responsible administrators. • Support secure integration across on-premises, cloud, and hybrid systems, observing approved authorization boundaries and cross-domain requirements. • Evaluate cryptographic dependencies in proposed designs and modernization efforts; advise on interoperability, lifecycle support, and migration impacts. • Coordinate with mission partners and engineering teams on protection requirements supporting approved Automated Data Obfuscation capabilities. • Conduct authorized technical evaluations of cryptographic controls and workflows; document methods, findings, and recommended remediation. • Support vulnerability analysis, secure configuration reviews, and verification of approved patches or changes affecting cryptographic capabilities. • Provide technical evidence and documentation to ISSO/ISSM teams for Risk Management Framework (RMF), Authority to Operate (ATO), and continuous ATO activities. • Research emerging cryptographic technologies and cybersecurity best practices; assess benefits, risks, compatibility, and implementation prerequisites. • Support incident investigation involving cryptographic services or suspected key or certificate compromise under Government-approved response procedures. • Coordinate approved cryptographic security checks and configuration controls within DevSecOps pipelines and centralized change management processes. • Prepare technical assessments, procedures, and decision briefs; communicate findings and recommendations to Government stakeholders and technical teams.