Note: The job is a remote job and is open to candidates in USA. DTCloudOn is a Houston-based cybersecurity and managed IT services firm supporting small and mid-sized organizations in the U.S. Defense Industrial Base. The CMMC Consultant will support CMMC engagement scoping, client discovery, NIST SP 800-171 assessments, GCC High implementation reviews, proposal development, and pricing on a part-time contract basis.
Responsibilities
- Lead or support discovery and scoping calls with prospective defense contractor clients
- Conduct gap assessments against NIST SP 800-171 and CMMC Level 2 requirements
- Define CUI scope and recommend enclave or full-tenant approaches
- Translate assessment findings into effort estimates, timelines, and fixed-fee project pricing
- Review and validate GCC High migration and technical implementation plans
- Help develop SOWs, proposals, and standardized service packages
- Guide clients on SSP and POA&M development and SPRS scoring
- Share expertise to strengthen our internal scoping and estimating methodology
Skills
- Certified CMMC Professional (CCP) credential or higher
- Hands-on experience implementing NIST SP 800-171 controls for defense contractors
- Working knowledge of DFARS 252.204-7012, 7019, 7020, and 7021 requirements
- Experience with SPRS scoring, SSP development, and POA&M management
- Experience with Microsoft 365 GCC or GCC High environments
- Experience scoping projects and writing SOWs or fixed-fee proposals
- Strong client communication skills with both executives and IT staff
- Certified CMMC Assessor (CCA) credential
- Experience supporting organizations through a C3PAO assessment or DIBCAC review
- Hands-on Microsoft security experience: Intune, Entra ID Conditional Access, Purview, Defender
- Existing network within the DIB, APEX Accelerators, or prime contractor supplier programs
- Security+, CISSP, CISM, or Microsoft certifications (SC-401, SC-300, MS-102)
Benefits
- This is a flexible, remote role
Company Overview