Overview

Responsibilities

• Develop implement and maintain secure configuration baselines for multiple operating systems (Windows Linux macOS).
• Develop secure configurations for enterprise services applications and platforms including Microsoft 365 AWS GCP Azure web browsers and databases.
• Assess foundational standards federal regulations compulsory directives and agency policies (e.g. CIS Benchmarks NIST SP 800-53 Rev 5 NIST Baseline Checklist Repository and CISA BOD 25-01 SCuBA) to create agency-specific baselines.
• Develop implementation resources such as Group Policy Objects (GPOs) BigFix fixlets scripts and automation tools for enforcing and maintaining secure configurations.
• Perform continuous configuration compliance assessments and validation using enterprise scanning tools (e.g. Nessus SCAP).
• Create maintain and update technical control sets and baseline compliance scanning policies to ensure consistent validation and remediation tracking.
• Integrate configuration compliance validation data with SIEMs or enterprise dashboards for executive-level visibility.
• Prepare professional technical documentation including business justifications risk assessment and management documents SOPs processes workflows and executive briefings.
• Lead and facilitate working groups or collaboration forums with stakeholders from cybersecurity and IT operations communities.
• Collaboratively develop and align configuration baseline standards with agency mission and business requirements.
• Serve as a technical lead to guide stakeholders through secure configuration implementation validation and continuous improvement activities.

Required Qualifications

• Demonstrable credentials reflecting knowledge skills and experience in Secure Configuration Management (SCM).
• Advanced knowledge of enterprise configuration standards and compliance frameworks including CIS Benchmarks NIST SP 800-53 Rev 5 NIST Baseline Checklist Repository and CISA BOD 25-01 Secure Cloud Business Applications (SCuBA) Secure Configuration Baselines.
• Experience assessing foundational standards federal regulations compulsory directives and agency policies to develop agency-specific secure configuration baselines.
• Experience developing implementation resources (e.g. Group Policy Objects (GPOs) BigFix fixlets) for secure configuration deployment.
• Experience developing and maintaining secure baselines across multiple operating systems (Windows Linux macOS) and enterprise services applications and platforms (Microsoft 365 AWS GCP Azure web browsers and databases).
• Proficiency in Group Policy Object (GPO) management and mobile device management (MDM) tools such as Jamf BigFix and Intune.
• Experience with configuration automation and baseline deviation tracking.
• Familiarity with enterprise scanning tools (e.g. Nessus SCAP) for compliance validation.
• Ability to create and maintain technical control sets and baseline compliance scanning policies.
• Strong professional technical writing skills for creating business justifications risk assessments technical and programmatic guidance and executive summaries.
• Experience leading collaboration forums with broad stakeholder groups (e.g. working groups involving sub-organization cybersecurity and IT operations participants).
• Demonstrated ability to collaboratively develop configuration baseline standards aligned with mission and business requirements.
• Demonstrated ability to serve as a technical lead guiding stakeholders in implementing secure configurations.

Preferred Qualifications

• Experience supporting DHS or other federal agencies in secure configuration management initiatives.
• Knowledge of federal compliance frameworks including FISMA FedRAMP and CISA guidance.
• Experience automating configuration compliance checks using enterprise tools such as BigFix Tenable or SCAP scanners.
• Proficiency in PowerShell Python or Bash scripting for configuration automation compliance validation and reporting.
• Experience creating dashboards and compliance reports for management and executive review.
• Strong leadership communication and problem-solving skills to coordinate across technical and business teams.

About cFocus Software

Equal Employment Opportunity Statement