CMMC Level 2 Compliance Lead (Remote/Travel)

IllTip; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

IllTip is seeking a customer-facing lead to drive CMMC Level 1/2 engagements with federal and commercial clients in the United States. You will own interpretation of NIST SP 800-171, scope assessment boundaries, and documentation from kickoff through C3PAO assessment and sustainment.

Expect 10–25% travel for kickoff, readiness reviews and assessment weeks. You will configure controls hands-on and verify results as an assessor, writing SSPs, policies, and POA&Ms, and coordinating evidence for

Qualifications

• Hands-on experience guiding defense contractors through NIST SP 800-171 or CMMC Level 2.
• Ability to write assessor-ready documentation including SSPs, policies, POA&Ms, and diagrams.
• Direct admin-console experience with GCC High or Google Workspace.
• Endpoint management on Windows and macOS with Intune or Jamf; know SIEM and vulnerability management.

Responsibilities

• Serve as the primary day-to-day contact for assigned customers, leading kickoffs and status updates.
• Define assessment boundaries by tracing FCI/CUI and producing boundary diagrams.
• Write and maintain SSPs, policies, POA&Ms, and evidence libraries; support SPRS submissions.
• Implement controls (identity, MFA, access) in GCC High or Google Workspace tenants.
• Manage endpoint configuration across Windows/macOS with Intune or Jamf; enforce baselines.
• Assist customers through assessment week and sustainment cycles.

Skills

NIST 800-171

CMMC Level 2

Executive communication

Project management

Tools

GCC High

Google Workspace

Intune

Jamf

SIEM

Job description

IllTip is seeking a customer-facing lead to drive CMMC Level 1/2 engagements with federal and commercial clients in the United States. You will own interpretation of NIST SP 800-171, scope assessment boundaries, and documentation from kickoff through C3PAO assessment and sustainment.

Expect 10–25% travel for kickoff, readiness reviews and assessment weeks. You will configure controls hands-on and verify results as an assessor, writing SSPs, policies, and POA&Ms, and coordinating evidence for