Mindline is looking for a US Citizen based in the Greater Seattle area to join our practice on a part-time 1099 basis, helping Defense Industrial Base companies achieve and maintain CMMC Level 2 compliance in Microsoft 365 GCC High environments.
What you\'d be doing
You\'d work directly with DIB clients — manufacturers, defense contractors, engineering firms — implementing the Microsoft security stack end-to-end:
- Entra ID— Conditional Access policy design, phishing-resistant authentication (FIDO2/WHfB), PIM, identity governance
- Purview— Sensitivity labels, DLP policies, auto-labeling, compliance posture management
- Sentinel— SIEM deployment in Azure Government, KQL alert rules, continuous monitoring evidence
- Azure Virtual Desktop— Secure enclave architecture, managed identities, session host hardening
This isn\'t checkbox compliance work. You\'d be designing and implementing defensible security architectures — then documenting them clearly enough that a C3PAO assessor can validate the controls and a client IT team can operate them.
What we\'re looking for
- US Citizenship (required — GCC High tenant access)
- Based in the Greater Seattle area — client work is fully remote, but I want someone who can periodically come to my home office in the area for whiteboarding, knowledge sharing, and working sessions. This isn\'t a daily commute — it\'s an occasional in-person collaboration with someone I trust to represent me to my clients well.
- Hands-on experience with at least two of the five areas above — depth in one matters more than surface knowledge of all five
- Comfort working directly with client IT teams who range from 5-person shops to 200-person departments
- Reliability. You\'d be taking on my clients. I need someone who delivers what they commit to, communicates proactively when things shift, and treats client deadlines like their own.
Nice to have, not required
- Experience in GCC High or Azure Government (vs. Commercial cloud)
- Familiarity with NIST SP 800-171 or CMMC Level 2 assessment requirements
- Any Microsoft security certifications (SC-300, SC-400, AZ-500, MS-102)
What we offer
- 1099 part-time engagement — flexible hours, project-based work
- Direct access to a mature, documented methodology — you can see the depth of our approach atdocs.mindline.com
- Real client impact — the work you do directly enables companies to win and retain DoD contracts
- A small, technical team where your judgment shapes the approach, not just the execution
Interested?
DM me or comment below. Happy to have a conversation about fit before anything formal.