CMMC Compliance Consultant (CCP Preferred)

Employment Type: Full-Time or 1099 Contract

About Workplace IT

Workplace IT is a Colorado-based Managed Service Provider specializing in cybersecurity, Microsoft 365, compliance, and CMMC readiness for organizations supporting the Defense Industrial Base. We help organizations implement and maintain compliance with NIST SP 800-171 and prepare for CMMC Level 2 certification.

We're looking for someone who enjoys solving compliance challenges while working directly with clients and technical engineers.

Responsibilities

• Lead CMMC Level 2 readiness engagements
• Conduct NIST SP 800-171 gap assessments
• Develop and maintain:
• • System Security Plans (SSPs)
  • Plans of Action & Milestones (POA&Ms)
  • Policies and procedures
  • Asset inventories
  • Evidence repositories
• Collect and validate evidence for all 110 security requirements and 320 assessment objectives
• Prepare clients for C3PAO assessments
• Interview client personnel and document operational practices
• Work with engineers implementing Microsoft 365, Intune, Entra ID, Defender, SIEM, and networking solutions
• Review security configurations against NIST requirements
• Participate in internal quality reviews
• Assist with customer presentations and executive reporting

Required Qualifications

• Certified CMMC Professional (CCP) preferred
• Experience implementing NIST SP 800-171
• Strong understanding of CMMC Level 2
• Experience writing SSPs and POA&Ms
• Excellent documentation and technical writing skills
• Ability to explain technical concepts to non-technical executives
• U.S. Citizen
• Ability to pass a background check

Preferred Qualifications

• Certified CMMC Assessor (CCA)
• Registered Practitioner (RP)
• CISSP
• Security
• Microsoft certifications
• Azure/Entra ID experience
• Microsoft Intune administration
• Microsoft Defender
• Microsoft Purview
• Microsoft Sentinel
• GCC High experience
• DFARS experience
• ITAR environment experience

Technical Experience

Experience with one or more of the following:

• Microsoft 365
• Entra ID
• Intune
• Defender for Endpoint
• Microsoft Sentinel
• Purview
• Conditional Access
• MFA
• Vulnerability Management
• SIEM platforms
• Endpoint Detection & Response (EDR)
• Firewalls
• Windows Server
• Active Directory
• VMware or Hyper-V

Soft Skills

• Strong written communication
• Highly organized
• Detail-oriented
• Self-motivated
• Comfortable working directly with executives
• Able to manage multiple client projects simultaneously

What Success Looks Like

Within your first few months, you'll be expected to:

• Lead multiple CMMC readiness engagements
• Produce high-quality SSPs and POA&Ms
• Build evidence packages ready for C3PAO review
• Become a trusted advisor to clients
• Help expand Workplace IT's CMMC consulting practice