Eric Mill

Mill graduated from Worcester Polytechnic Institute with a computer science degree in 2005.^[5][6] He worked in a variety of cybersecurity and software development roles, including at digital services firms before joining the Sunlight Foundation in 2009. While there, Mill developed Scout, a search engine and notification system for U.S. government activity and the "Congress" app for Android, which provided live updates on the people and work of the U.S. Congress.^[7][8]

As an open source contributor, Mill was engaged in advocacy in removing the insecure SHA-1 cryptographic hash function from website certificate signatures.^[9] From 2014 through the retirement of SHA-1 in 2016, Mill operated a web-based tool to check if a web service's certificate was using the SHA-1 signature algorithm.^[10]

Mill joined GSA in 2014 as a member of the then-new 18F digital services agency inside the Office of Citizen Services and Innovative Technologies (OCSIT).^[5][11] In subsequent years, he was named a senior advisor for 18F, and its new parent organization Technology Transformation Services. Mill also served as deputy director of GSA's authentication and sign-on service, Login.gov.^[3][1]

In 2019, Eric served on the U.S. Senate Committee on Rules and Administration’s Democratic staff as a senior technology advisor on election security.^[12] In that role, he drafted the DOTGOV Act of 2020 to strengthen the .gov internet domain, which passed as part of the FY20 appropriations bill.^[13][14][15] After leaving Congress, Mill worked on the Chrome security team at Google.^[16]

Mill joined the Biden Administration in 2021 as a senior advisor to the Federal Chief Information Officer in the Office of Management and Budget.^[1][17] He led work on the Federal Zero Trust Strategy, the 2024 FedRAMP Modernization Memo, and managed investments in the Technology Modernization Fund.^[3] In January 2024, Mill left OMB to take a new position as the executive director for Cloud Strategy in GSA's Technology Transformation Services.^[3] In that role, he oversaw FedRAMP reform along with other cloud security initiatives.^[18][19]