CMMC Compliance Program Engineer

Role Overview

• Support the Compliance as a Service “CaaS” Program Team in planning and executing compliance initiatives.
• Assist with all CaaS-related work efforts in all phases of the CaaS program, such as consulting during technical environment standup, documentation writing, mock assessments, and other compliance-related duties.
• Help prepare and maintain Plans of Action & Milestones (POA&Ms) and track remediation activities.
• Draft, customize, and update policies, procedures, and compliance documentation to meet client needs.
• Collaborate with IT, security, and business teams to implement compliance requirements effectively.
• Contribute to client engagements, including readiness consulting and audit preparation.
• Monitor regulatory updates and share insights with the program development team on emerging requirements.
• Assist with training and awareness programs to strengthen the compliance culture across the organization.
• Participate in CMMC Assessments as a Quality Assurance role after CMMC Assessor (CCA) certification is obtained.

Requirements

• Registered Practitioner Advanced (RPA) or Certified CMMC Professional (CCP) Required
• Excellent communicator.
• Five or more years of experience in compliance, cybersecurity, or IT governance.
• Strong knowledge of CMMC and NIST SP 800-171.
• Experience with compliance documentation writing, evidence gathering, POA&M tracking, and audit preparation.
• Strong organizational and communication skills.
• U.S. citizenship; ability to obtain a DoD clearance.
• Preferred Bachelor’s degree in cybersecurity, information security, computer science, or a related field.
• Additional certifications such as CISSP, CISA, CISM, Security+, or ISO 27001.
• Experience supporting defense contractors, federal compliance programs, or managed security providers.
• Experience supporting clients through CMMC L2 assessments with DIBCAC or a C3PAO.
• Familiarity with GRC tools, vulnerability management, or SIEM platforms.
• Willingness to travel up to 15–20 percent for client assessments and engagements.

Tech Stack

• Cyber Security
• RPA

Benefits

• Medical, dental, and vision insurance, with HSA Health Insurance option
• Reimbursement for training and pursuit of advanced certifications.
• Company match on voluntary pretax salary contributions
• 12 paid holidays
• 18 days of Paid Time Off (PTO)
• 100% paid group life insurance
• 100% company-paid short-term disability
• 100% company-paid long-term disability
• Free-to-you on-campus gym