CMMC 2.0 Hands‑On Contractor

We are looking for a skilled Cyber Security Engineer to support a defense manufacturing organization in achieving and maintaining

CMMC 2.0

Level 2 compliance. This long-term contract position requires a hands-on, detail-oriented individual to validate policies, address compliance gaps, and ensure audit readiness. The role is highly execution-driven and will involve direct engagement with compliance platforms, security controls, and regulated environments.

Responsibilities:

• Review and validate security policies within compliance platforms to ensure alignment with

CMMC 2.0

Level 2 and

NIST 800-171

standards.

• Assess and map organizational compliance across the 110 required controls, identifying and addressing gaps.
• Provide hands-on support for remediation efforts and ensure all measures are audit-ready.
• Collect evidence, document findings, and prepare reports to support compliance audits.
• Work directly with Microsoft O365 environments and Microsoft Entra ID to ensure configurations meet compliance standards.
• Collaborate with internal IT teams, external consultants, and third-party IT partners to implement and validate controls.
• Ensure all compliance measures are practical, defensible, and thoroughly documented for audit purposes.
• Support the organization in hardening systems and ensuring security policies align with regulatory requirements.
• Assist in pre-assessment activities to ensure readiness for formal audits.