IT Compliance & Security Specialist – CMMC/PSO

Bestica Inc.; San Antonio (TX); On-site; USD 34,000 - 62,000; Part time

Job summary

Bestica Inc. is seeking an IT Compliance & Security Specialist – CMMC/PSO on a part-time basis in the United States.

The role focuses on identity and security management, including Entra ID Conditional Access, Identity Protection, and threat monitoring with Defender for Endpoint and Azure Sentinel. Primary responsibilities include configuring CMMC Level 1/2 controls, managing CUI-based access, and maintaining security policy documentation.

Qualifications

• Experience with Entra ID — Conditional Access and Identity Protection.
• Experience with Microsoft Defender for Endpoint and Azure Sentinel.
• CMMC Level 1/2 implementation experience, including CUI-based access controls.
• Experience as an IT PSO, or in a similar federal security compliance role.

Responsibilities

• Identity & Security: Manage Entra ID Conditional Access and Entra ID settings; Administer Entra ID Identity Protection; Monitor and respond to threats using Defender for Endpoint and Azure Sentinel.
• CMMC Compliance: Configure and implement CMMC Level 1 and 2 controls; Plan and build Level 1/2 systems; Implement access controls based on department roles interacting with CUI; Maintain IT policy documentation; Serve as IT PSO for cleared contracts with government security officers.

Skills

Entra ID CA

Identity Protection

Defender for Endpoint

Azure Sentinel

CMMC Level 1/2

IT PSO experience

Top Secret clearance

Job description

Title: IT Compliance & Security Specialist – CMMC/PSO

Job Type: Part-Time

Key Responsibilities

1. Identity & Security

• Manage Entra ID Conditional Access and Entra ID settings.
• Administer Entra ID Identity Protection.
• Monitor and respond to threats using Microsoft Defender for Endpoint and Azure Sentinel.

2. CMMC Compliance

• Configure and implement CMMC Level 1 and Level 2 controls.
• Plan and build out Level 1 and Level 2 systems.
• Implement access controls based on department roles interacting with CUI (Controlled Unclassified Information).
• Maintain IT policy documentation — security policy, acceptable use, system security plans.
• Serve as IT PSO (Program Security Officer) for cleared contracts, working with government security officers on system security requirements.

Qualifications

• Experience with Entra ID — Conditional Access and Identity Protection.
• Experience with Microsoft Defender for Endpoint and Azure Sentinel.
• CMMC Level 1/2 implementation experience, including CUI-based access controls.
• Experience as an IT PSO, or in a similar federal security compliance role.
• Active Top Secret clearance preferred, or willing to obtain one.