CMMC Security Engineer

Job Summary

A company is looking for a Staff Security & Compliance Engineer specializing in M365 GCC High and CMMC.

Key Responsibilities

• Lead the design and deployment of the GCC High tenant and establish secure architecture for various Microsoft services
• Implement compliance measures for CMMC Level 2, DFARS 7012, and NIST 800-171, including developing system security plans and incident response workflows
• Oversee security operations, manage vulnerability remediation, and establish monitoring and audit logging standards

Required Qualifications

• U.S. Person (citizen or permanent resident) required for GCC High/CUI access
• 6-10+ years of experience in Microsoft 365/Azure security engineering
• Hands-on experience with GCC High or FedRAMP/DoD environments
• Direct experience with CMMC or NIST 800-171 control implementation and security audits
• Relevant certifications such as CISSP, CISM, or Security+, and Microsoft certifications are a plus