FEDLIN Capability Statement
FEDLIN is a Data Security Engineering firm that secures the links critical infrastructure runs on. We fix the cryptographic and security findings in regulated, legacy-heavy environments, document what can't change, and build software that ships with evidence, working behind the firm that holds the contract. Every deliverable carries an evidence pack mapped to NIST 800-53 and NIST CSF.
Concentration
Core Competencies
Every engagement builds and runs the controls your mandate requires, on a crypto-agile foundation deployed inside your own environment and evidenced against NIST 800-53 and NIST AI RMF.
Findings: Fix or Document
Cipher-suite, protocol, key-exchange, and certificate findings remediated where the system allows. Where legacy hardware cannot support modern cryptography, a documented exception with compensating controls and a named owner, mapped to NIST 800-53 and NERC CIP.
NIST: SC-8 · SC-12 · SC-13 · RA-7 · CA-5NERC CIP Interactive and Vendor Remote Access
Every remote and vendor access path into the control network mapped, including cellular and satellite backhaul. For high- and medium-impact BES Cyber Systems, paths engineered to CIP-005 R2 and R3: an Intermediate System, encryption and multi-factor authentication, and the ability to see and end active vendor sessions, with an evidence package. Work inside an Electronic Security Perimeter runs through the integrator or the client team.
NIST: AC-17 · IA-2 · SC-8 · AU-2Cryptographic Inventory and Post-Quantum Readiness
Cryptographic inventory delivered as a CycloneDX CBOM, mapped to CNSA 2.0, with a NIST 800-53 crosswalk and a sequenced migration roadmap, produced inside your own boundary.
NIST: SC-12 · SC-13 · RA-3Secure Build with Evidence
Security engineered into the parts of a system that matter (authentication, cryptography, data protection, CI security gates, audit logging) with automated tests that prove each control keeps working.
NIST: AC · IA · SC · AU · SA-11Company Profile
Company Data
| Entity | FEDLIN LLC |
| Est. | 2022 |
| Domicile | New Mexico (LLC) |
| Operations | Middle Tennessee |
| Serving | Nationwide (remote) |
| Business Size | Small Business |
| Gov Markets | State & Local Government; prime and subcontract teaming |
| Teaming | Open to prime & subcontract |
| UEI | JD5QLE3CMWY9 |
Classification
NAICS Codes
| Code | Description | |
|---|---|---|
| 541519 | Other Computer Related Services | Primary |
| 541512 | Computer Systems Design Services |
How We Deliver
Engagement Model
Post-Quantum Readiness Assessment
A cryptographic inventory of one production environment, including long-lived assets, with a Cryptographic Readiness Report, a client-owned Risk Register, and a sequenced migration roadmap. CNSA 2.0 algorithm alignment for unclassified systems.
NIST 800-53: CM-8 · SC-12 · SC-13 · RA-3Findings Remediation
Findings closed at the source at published, fixed prices, with before and after evidence. Where a legacy system cannot take the fix, a risk-acceptance record with documented compensating controls, in the NIST 800-53 RA-7 and POA&M format.
NIST 800-53: RA-7 · CA-5 · SI-2 · SC-8Point Engagements
Specialized Projects
Edge Security
NIST 800-53: SC · SI
Crypto-Agility Engineering
NIST 800-53: SC-12 · SC-13
GRC Engineering
NIST 800-53: CA · CM · AC · IA
Penetration Testing
NIST 800-53: CA-8
Private AI in the boundary (pilot)
NIST 800-53: AI RMF · SC · AU
Framework Coverage
Standards & Frameworks
Credentials
Certifications & Partnerships
AI & Agentic Systems Extension
For systems with LLMs, MCP servers, or agentic pipelines, FEDLIN extends the NIST 800-53 baseline with NIST AI RMF: verifiable controls for context boundaries, prompt injection surface, and agentic audit logging, mapped to your target framework.
Why FEDLIN
Key Differentiators
Infrastructure-layer delivery
We build and configure controls at the infrastructure layer, then instrument them. Every control produces continuous, auditor-ready evidence from day one.
Senior oversight, every engagement
Every engagement is structured and led by a principal security architect, so the methodology that wins the work is the methodology that delivers it.
Framework-led, outcome-organized
NIST 800-53 and NIST CSF are the foundation. We scope to the control evidence a NERC CIP audit or a NIST 800-53 assessment asks for, and map the same evidence to SOC 2 or PCI DSS where a customer requires it.
Fix it, or document why you can't
Built for systems that can't be replaced on the audit's schedule: fixes where the system can take them, and compensating-control records an assessor accepts where it can't, each with a named owner and a review date.
Teaming & work behind your contract
FEDLIN works behind primes and integrators on the work they hold: scoped, fixed-price subcontracts; teaming; key-personnel résumés on request. Contact us to discuss your opportunity.
Delivery & Experience
Key Personnel Experience
Key-personnel experience from the principal's engagements, by sector and role, performed as contract work (some through integrator or staffing partners). Client names withheld by agreement. None of these is federal past performance.
NERC/FERC CIP Grid Operator
Vulnerability SME. Cryptographic findings across IT, OT, and IoT (cipher-suite, protocol-version, key-exchange, and certificate), remediated where systems allowed and accepted with documented compensating controls where legacy hardware could not support modern cryptography.
IT/OT and ICS/SCADA Environments
Penetration-test remediation, cloud posture management, and detection engineering across multi-site OT estates.
Fintech Funding Platform
Security architect. A tamper-evident transaction ledger with post-quantum signatures (SLH-DSA, FIPS 205) running in production, with hardened CI/CD, secrets management, and access controls.
Boutique Professional Services
Platform hardening across Google Workspace/GCP, Microsoft 365/Azure, and AWS environments.
Proof & Depth
Technical Depth & Proof Points
Post-Quantum Readiness
Hybrid ML-KEM-768 (FIPS 203) key establishment enabled across edge infrastructure, with SLH-DSA (FIPS 205) as the commercial-path signing layer for long-lived integrity, held distinct from the CNSA 2.0 NSS signing suite (ML-DSA-87, LMS/XMSS). Crypto-agility architecture and a PQC migration roadmap sequenced to the NSA CNSA 2.0 targets (ML-KEM-1024 for key establishment) and EO 14412 timelines, covering the key-exchange migration and a documented crypto-agile path for the signature layer.
Post-Quantum Readiness →Secure Build with Evidence
Authentication, cryptography, data protection, CI security gates, and audit logging engineered into a production platform, with automated tests as running evidence that each control keeps working.
Findings Remediation →Critical Infrastructure Security
Cryptographic findings dispositioned at a NERC/FERC CIP grid operator: remediate where the system allows, document compensating controls where it cannot. The bench adds OT/ICS and SCADA assessment experience across water and wastewater utilities, oil and gas, and manufacturing, including NERC CIP assessments.
Critical Infrastructure Security →Vendor Remote Access
FEDLIN's own vendor-access pattern: scoped, time-boxed, multi-factor authenticated, and session-logged, with evidence pushed to the client's own tenant. Running in a partner environment today, and the basis for engineering interactive and vendor remote access to CIP-005 R2 and R3.
NERC CIP Remote Access →AI & Agentic Systems Security
NIST AI RMF operationalized for agentic and MCP server architectures. LLM threat modeling, MCP server security, prompt injection controls, agentic audit logging. OWASP LLM Top 10 coverage.
Prime & Sub Arrangements
Teaming
Engagement Structure
- Scoped, fixed-price subcontracts; teaming; key-personnel résumés on request
- Works behind primes and integrators, delivering a Statement of Work the prime can mark up
- NDA, MSA, and teaming terms on request
- FEDLIN does not store or process CUI; work is performed inside the client's boundary
- Key personnel: U.S. citizen, eligible for Public Trust / DoD clearance
Contact FEDLIN
New Mexico LLC, operating from Middle Tennessee, serving clients nationwide