Remote CMMC Implementation Lead

Secureframe; New York (NY); Remote; USD 110,000 - 170,000; Full time

Job summary

Secureframe is hiring an Implementation Specialist focused on CMMC to lead customer implementations for defense customers preparing for Level 2 assessments. You will configure and administer Microsoft 365 GCC High and Azure Government environments, implement controls, and help build the documentation and evidence for assessment readiness.

This role combines project leadership, Microsoft systems administration, security engineering, and CMMC expertise.

Qualifications

• 2–5 years of relevant experience in technical implementation, Microsoft systems administration, security engineering, professional or managed services, or technical consulting, including customer-facing delivery.
• Experience administering Microsoft Azure, Microsoft 365 GCC High, and Windows environments.
• Strong knowledge of Active Directory, Entra ID, Group Policy, DNS, hybrid identity.
• Experience deploying Microsoft Sentinel and Intune, and configuring Microsoft Defender and Purview.
• Proficient with PowerShell and automation.
• CMMC Level 2 expertise and hands-on readiness/remediation experience (NIST SP 800-171 controls, SSPs, POA&Ms).
• Ability to work with varied customers from small teams to larger organizations.
• Customer-centered and able to explain complex concepts clearly.

Responsibilities

• Lead end-to-end CMMC implementations from discovery and scoping through environment configuration and handoff.
• Translate requirements into implementation plans with scope, timelines, milestones, owners, risks, and success criteria; drive accountability across engagements.
• Identify control gaps, remediation actions, and evidence collection to support CMMC Level 2 readiness.
• Map CUI/FCI locations across systems; document boundaries and control ownership.
• Configure workflows for mapping, evidence automation, and readiness reporting; contribute to SSPs/POA&Ms.
• Administer GCC High/Microsoft 365 and Azure Gov resources, including VMs, storage, and monitoring.
• Deploy and configure Entra ID, CA, MFA, RBAC; manage Windows Server, AD DS, GPO, DNS, and hybrid identity.
• Deploy Intune, device configurations, security baselines, and patching.
• Implement Defender and Purview for data protection and vulnerability management.
• Coordinate firewall, VPN, segmentation, and on-prem to cloud connectivity with stakeholders.
• Improve pre-sale scoping, estimates, and handoff quality with Sales/CS.

Skills

GCC High Admin

Azure Government

CMMC

PowerShell

Automation

Security engineering

Project management

Customer delivery

Entra ID

Intune

Sentinel

Defender

Purview

Documentation

Communication

Tools

Azure Government

Intune

Sentinel

Defender

Purview

PowerShell

Job description

Secureframe is hiring an Implementation Specialist focused on CMMC to lead customer implementations for defense customers preparing for Level 2 assessments. You will configure and administer Microsoft 365 GCC High and Azure Government environments, implement controls, and help build the documentation and evidence for assessment readiness.

This role combines project leadership, Microsoft systems administration, security engineering, and CMMC expertise.