FIPS 140 Security Engineer

Job Title: FIPS 140 Security Engineer

Location: Columbia, MD 21046, USA, Hybrid

Local candidate: locals first but we can accept non locals too.

Duration: 6-Month Contract with Potential for Full-Time Conversion

Interview Mode: Phone + video

LinkedIn: Required

Position Type: Hybrid / Customer-Government Site with Telework Available
Program: Accredited Testing and Evaluation (AT&E) – Common Criteria/FIPS
Security Clearance: None Required
Work Schedule: Standard Business Hours

Key Responsibilities

• Support FIPS 140 validation projects across multiple technology and product types.
• Perform general security analysis and product architecture evaluations.
• Conduct vulnerability testing and physical security testing activities.
• Perform system-level logical analysis and product evaluations against applicable technology standards and Protection Profiles.
• Execute cryptographic and Public Key Infrastructure (PKI) testing activities.
• Perform cryptographic algorithm validation and testing.
• Conduct source code reviews and security analysis activities.
• Develop and maintain technical reports and validation documentation.
• Create automation scripts and applications to support testing activities and test case execution.
• Develop tools and scripts to improve testing efficiency and repeatability.
• Build and maintain testing environments and supporting lab infrastructure.
• Analyze testing results and provide technical recommendations.
• Support design reviews and product architecture assessments.

Required Technical Skills

• Experience with Python programming language.
• Experience with debugging tools and methodologies including:
• Android Debug Bridge (ADB)
• WinDBG
• Visual Studio debugging tools
• Experience performing statistical analysis of entropy sources.
• Knowledge of cryptographic encryption algorithms.
• Knowledge of key exchange algorithms and hashing/message authentication algorithms.
• Understanding of Public Key Infrastructure (PKI) concepts and implementations.
• Knowledge of random number generators and entropy generation techniques.
• Experience with one or more programming languages including:
• C
• C++
• Python
• Java
• Ability to interpret and apply security standard requirements to commercial products.
• Experience configuring test environments and laboratory systems.
• Understanding of networking fundamentals including:
• TCP/IP
• Subnetting
• Routing
• Knowledge of secure communication protocols including:
• SSH
• IPsec
• TLS
• Experience performing testing, documenting results, and technical report writing.
• Strong troubleshooting and analytical problem-solving skills.
• Experience with scripting and testing automation.

Preferred / Nice-to-Have Skills

• Cryptographic Validation Program (CVP) Certification.
• Knowledge of OpenSSL and/or OpenPGP.
• Vulnerability assessment or penetration testing experience.
• Strong understanding of computer security principles and industry best practices.
• Knowledge of Active Directory and Linux administration.
• Experience with X.509 certificate validation.
• Experience with laboratory and electrical testing equipment including:
• Oscilloscopes
• Function generators
• Multi-meters
• Signal generators
• Industry certifications including:
• CCNA
• CCNP
• CCIE
• JNCIA
• JNCIS
• JNCIP
• JNCIE

Qualifications & Experience

• Bachelor''s degree in Computer Science, Cybersecurity, Information Assurance, Electrical Engineering, Computer Engineering, or a related technical discipline.
• Typically requires a Bachelor''s degree with 2–4 years of relevant professional experience.
• Strong multitasking, organization, and time management skills.
• Strong written and verbal communication skills.
• Ability to work effectively in a collaborative laboratory and testing environment.