CMMC Compliance Architect for Federal IT Security

Fortem Technologies; Lindon (UT); On-site; USD 110,000 - 150,000; Full time

Job summary

Fortem Technologies is seeking an IT Security Compliance Specialist to lead the implementation, certification, and ongoing maintenance of CMMC Level 2 controls for CUI under NIST SP 800-171. The role combines hands-on security engineering with regulatory requirements to prepare for a C3PAO assessment and sustain continuous compliance across contracts.

The ideal candidate has 3–5+ years in IT security/compliance, experience with NIST SP 800-171/800-53, DFARS 252.204-7012, and practical work with

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or equivalent experience.
• 3–5+ years IT security/compliance experience with NIST SP 800-171/800-53 or CMMC.
• Working knowledge of DFARS 252.204-7012, FAR 52.204-21, and CUI handling requirements.
• Experience with GCC High/Azure Gov/AWS GovCloud or similar CUI environments preferred.
• Hands-on proficiency with MFA, EDR, SIEM, vulnerability scanning, and patch management.
• Strong documentation and technical writing with attention to detail.

Responsibilities

• Design, deploy, and manage technical security controls for the compliance program.
• Maintain SSP/POA&M, system diagrams, and control evidence.
• Create and maintain security policies mapped to control families.
• Coordinate with external assessors and RPOs during CMMC processes.
• Run ongoing compliance activities: risk assessments, vulnerability management, and audit reviews.
• Support CMMC Level 2 certification and continuous monitoring.

Skills

Regulatory compliance

IT security

NIST SP 800-171

CMMC familiarity

Technical writing

Strong communicator

Education

Bachelor's degree in Information Technology/Cybersecurity/CS

Tools

EDR

SIEM

Vulnerability scanning tools

Patch management tooling

Job description

Fortem Technologies is seeking an IT Security Compliance Specialist to lead the implementation, certification, and ongoing maintenance of CMMC Level 2 controls for CUI under NIST SP 800-171. The role combines hands-on security engineering with regulatory requirements to prepare for a C3PAO assessment and sustain continuous compliance across contracts.

The ideal candidate has 3–5+ years in IT security/compliance, experience with NIST SP 800-171/800-53, DFARS 252.204-7012, and practical work with