FIPS 140 Security Engineer

FIPS 140 Security Engineer

Location: Columbia, MD preferred; willing to consider remote for strong candidates

Employment Type: Contract

Role Overview: This is an opportunity to work in the IT Security field supporting national defense. This role joins an Accredited Testing and Evaluation (AT&E, Common Criteria/FIPS) team. The products you will work on are deployed into larger systems to facilitate secure communications. The position is in a hands-on lab environment and offers the opportunity to learn from industry experts.

Key Responsibilities

• Work on varied FIPS 140 validation projects.
• Perform general security analysis and design work, including product architecture.
• Conduct vulnerability testing, physical security testing, and system-level logical analysis.
• Execute product evaluations against Technology Type standards.
• Perform cryptographic and Public Key Infrastructure (PKI) testing and algorithm testing.
• Engage in source code review activities.
• Handle technical report writing and review.
• Automate testing through scripting and develop applications to support test cases.

Required Qualifications

• A Cryptographic Validation Program (CVP) Certification is required.
• The role typically requires a BS degree with 2 - 4 years of prior relevant experience. This experience should include building testing environments, performing testing, and reporting results through technical writing.
• Knowledge of cryptographic encryption algorithms, key exchange algorithms, hashing/message authentication algorithms, PKI, and random number generators.
• Experience with programming languages such as C, C++, Python, or Java.
• Ability to comprehend and apply security standard requirements to products.
• Experience setting up networks, with familiarity in subnetting and routing concepts.
• Knowledge of common security-related protocols like SSH, IPsec, and TLS.
• Demonstrated skills in troubleshooting, problem-solving, multitasking, and time management.

Preferred Qualifications

• Experience with the Python programming language.
• Experience with debugging tools (e.g., Android debug bridge (adb), WinDBG, Visual Studio).
• Experience with statistical analysis of entropy sources.
• Knowledge of OpenSSL and/or OpenPGP.
• Vulnerability analysis or penetration testing experience.
• Knowledge of computer security principles and best practices.
• Related certifications (e.g., CCNA/CCNP/CCIE, JNCIA/JNCIS/JNCIP/JNCIE).
• Knowledge of Active Directory and Linux.
• Hands-on experience using tools such as an oscilloscope, function generator, or multi-meter.
• Knowledge of X.509 certificate validation.

Compensation & Benefits: The pay rate for this position is between $55.00/hr and $62.00/hr. The specific rate will be determined based on qualifications, experience, and other relevant factors.

This employer is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.