[Remote] CMMC Compliance Consultant

Note: The job is a remote job and is open to candidates in USA. Agile IT is a Microsoft AOS-G partner focused on helping defense contractors achieve CMMC compliance. The CMMC Compliance Consultant will lead clients through the CMMC lifecycle, providing assessments, documentation, and guidance to ensure compliance with regulatory requirements.ResponsibilitiesLead and execute CMMC Level 2 gap assessments against all 110 NIST SP 800-171 Rev 2 practices across the 14 control domainsConduct readiness reviews and deliver findings with prioritized remediation roadmapsAuthor and maintain SSPs, POA&Ms, policies, procedures, and implementation narratives using the NIST SP 800-171A examine, test, and interview methodologyBuild CMMC-scoped network diagrams, data flow diagrams, and CUI boundary documentationEvaluate client environments scoped to CUI systems, including Microsoft 365 GCC and GCC High, Intune and Microsoft Defender for Endpoint, and specialized platforms such as PreVeilServe as the primary technical point of contact for assigned DIB accounts across the compliance lifecycleFacilitate interviews with client staff to validate controls and gather evidence, and present status and executive readouts with clarityOwn data integrity in the GRC platform (e.g., IntelliGRC) for SSP management, POA&M tracking, and evidence managementImprove internal CMMC methodologies, templates, and toolingMentor junior consultants, and track CMMC Program rule changes (32 CFR Part 170, DFARS 252.204-7021) and Cyber AB guidance updates so the practice stays currentSkillsActive CMMC Certified Professional (CCP) credential in good standing with the Cyber ABActive CMMC Certified Assessor (CCA) credential in good standing with the Cyber ABMinimum 5 years of progressive IT experience, with at least 2 years focused on cybersecurityMinimum 1 year of direct CMMC, DFARS 252.204-7012/7021, NIST SP 800-171, or other compliance consulting experienceDemonstrated expertise scoping CUI environments and applying NIST SP 800-171 Rev 2 across all 14 control familiesHands-on experience with Microsoft 365 Commercial, GCC, and/or GCC High environments in a CMMC compliance contextWorking knowledge of Azure Sentinel, Microsoft Defender for Endpoint (MDE), and Intune within CMMC-scoped environmentsStrong proficiency writing SSP implementation narratives, NIST 800-171A-aligned assessment procedures, and POA&M documentationFamiliarity with FedRAMP Moderate authorization requirements and cloud service provider boundary scopingBachelor's degree in Computer Science, Cybersecurity, Information Technology, or a closely related fieldExperience with PreVeil, Lifeline, or other CUI-designated encrypted collaboration platformsExperience supporting multi-site CMMC Level 2 assessments in manufacturing, defense electronics, or aerospace sectorsPrior experience as a C3PAO team member on an assessmentExperience with GRC platforms such as IntelliGRC or equivalentCompany OverviewAdvanced Microsoft Technology Solutions It was founded in 2004, and is headquartered in San Diego, California, USA, with a workforce of 11-50 employees. Its website is http://www.AgileIT.com.