ZipRecruiter

Log In

2

Cmmc Remote Jobs (NOW HIRING)

Coalfire Federal

CCA Assessor - CMMC Services

Location Details All CMMC Assessor positions are full time remote. Occasional or limited travel may vary based on client needs. What you'll do * As a CCA Assessor, you will support assessing whether ...

Axiom

Lead Project Technician

$72K/yr

Assistance with CMMC/Client On-Boarding * Working with clients as tenant is built through ... Full-Remote Work from Home

OSIbeyond

Compliance Analyst

Rockville, MD · Remote

CMMC Registered Practitioner (RP) Preferred, not required * Security+ or equivalent cybersecurity certification Preferred Position: * Location Remote from the United States * Employment Type ...

OSI Beyond

Compliance Analyst

Rockville, MD · Remote

$65K - $75K/yr

CMMC Registered Practitioner (RP) - Preferred, not required * Security+ or equivalent cybersecurity certification - Preferred Position: * Location - Remote from the United States * Employment Type ...

ISI Enterprises

Sales Engineer

Herndon, VA · Remote

$100K - $125K/yr

Certified CMMC Professional (CCP): Has command of the CMMC framework and assessment process ... Hybrid or remote flexibility. Industrial Security Integrators, LLC ("IsI") is an equal opportunity ...

IsI Enterprises LLC

Sales Engineer

Herndon, VA · On-site +1

$100K - $125K/yr

Certified CMMC Professional (CCP): Has command of the CMMC framework and assessment process ... Hybrid or remote flexibility. Industrial Security Integrators, LLC ("IsI") is an equal opportunity ...

next page

Showing results 1-20

All JobsCmmc JobsCmmc Remote Jobs

Cmmc Remote information

What are the key skills and qualifications needed to thrive as a CMMC Remote Assessor, and why are they important?

To thrive as a CMMC Remote Assessor, you need a strong understanding of cybersecurity frameworks, auditing principles, and the CMMC (Cybersecurity Maturity Model Certification) requirements, often supported by relevant certifications such as CMMC-AB Certified Assessor or similar credentials. Familiarity with compliance management tools, secure file-sharing platforms, and remote assessment technologies is essential. Excellent communication, attention to detail, and analytical thinking are critical soft skills for interpreting complex security controls and collaborating with client organizations. These skills ensure accurate, thorough remote assessments and help organizations achieve and maintain required cybersecurity standards.

What is the difference between Cmmc Remote vs Cmmc Onsite?

AspectCmmc RemoteCmmc Onsite
Work EnvironmentRemote, from any locationOn-site, at designated facilities
CertificationsSame CMMC certifications requiredSame CMMC certifications required
Employer & Industry UsageUsed by organizations with remote teams in cybersecurity and complianceUsed by organizations requiring on-site security assessments
Work TasksRemote compliance assessments, documentation, and auditsOn-site security evaluations and physical assessments

The main difference between Cmmc Remote and Cmmc Onsite lies in the work environment. Cmmc Remote professionals perform compliance tasks from any location, offering flexibility, while Cmmc Onsite roles require physical presence for assessments. Both roles demand the same certifications and serve similar industry needs, but the work setting varies based on client requirements and job specifics.

What is a CMMC Remote job?

A CMMC Remote job refers to a position in which professionals work remotely to help organizations achieve and maintain compliance with the Cybersecurity Maturity Model Certification (CMMC) standards. These jobs typically involve assessing cybersecurity practices, preparing documentation, conducting virtual assessments, and advising on compliance strategies for contractors in the defense supply chain. Remote CMMC roles can include consultants, assessors, project managers, or compliance specialists, and enable organizations to access expertise regardless of geographic location. The work is essential for companies aiming to meet Department of Defense (DoD) cybersecurity requirements.

What are the most common challenges faced by professionals working in a remote CMMC compliance role?

Professionals in remote CMMC compliance roles often encounter challenges related to communication and collaboration, especially when coordinating with multiple departments to ensure cybersecurity standards are met. Remote work can make it more difficult to access sensitive systems securely and to conduct in-person assessments or interviews with stakeholders. Staying updated on evolving CMMC requirements and maintaining clear documentation can also be challenging without direct office resources. Successful candidates typically leverage secure collaboration tools, proactive communication, and well-structured workflows to overcome these obstacles.
More about Cmmc Remote jobs
What cities are hiring for Cmmc Remote jobs? Cities with the most Cmmc Remote job openings:
What are the most commonly searched types of Cmmc jobs? The most popular types of Cmmc jobs are:
What states have the most Cmmc Remote jobs? States with the most job openings for Cmmc Remote jobs include:
What job categories do people searching Cmmc Remote jobs look for? The top searched job categories for Cmmc Remote jobs are:
Cmmc Remote jobs near you
Infographic showing various Cmmc Remote job openings in the United States as of July 2026, with employment types broken down into 69% Full Time, 8% Part Time, and 23% Contract. Highlights an 100% Remote job distribution.
Senior FedRAMP / CMMC Security & Compliance Engineer

Senior FedRAMP / CMMC Security & Compliance Engineer

MM International

Denver, CO • Remote

Contractor

Re-posted 9 days ago

Job description

Job Title: Senior FedRAMP / CMMC Security & Compliance Engineer

Duration: 9+ months

Location: : Remote - Denver, CO Preferred

 

JOB DESCRIPTION:

Overview

We are seeking a Senior FedRAMP / CMMC Security & Compliance Engineer to lead hands-on compliance execution across federal and defense-aligned environments.
This role carries clear technical ownership and delivery leadership expectations. You will be responsible for translating FedRAMP and CMMC requirements into practical, defensible implementations—owning control mapping, evidence strategy, and deployment alignment across cloud platforms, systems, and teams.
This is not a policy-only or advisory role. It requires deep judgment, the ability to operate independently in ambiguous environments, and the confidence to lead compliance execution end-to-end while partnering closely with engineering, platform, and security stakeholders.
You will act as a trusted senior individual contributor who can “carry the ball,” proactively identify gaps and risks, and drive compliance outcomes forward without waiting for perfect instructions.
 
Responsibilities
  • Lead hands-on support for FedRAMP and CMMC compliance initiatives, with primary responsibility for control mapping, implementation alignment, and assessment readiness.
  • Translate FedRAMP (NIST 800-53) and CMMC / NIST 800-171 requirements into concrete technical and operational controls across cloud and system environments.
  • Own control mappings, ensuring accuracy, traceability, and alignment between framework requirements and real-world implementations.
  • Partner closely with engineering, DevOps, IT, and security teams to support deployment and enforcement of security controls, not just documentation.
  • Support the development and maintenance of compliance artifacts, including SSPs, control narratives, and supporting evidence.
  • Drive evidence strategy and collection, ensuring artifacts are defensible, complete, and aligned with assessor expectations.
  • Serve as a senior point of accountability during assessments, readiness reviews, and stakeholder discussions.
  • Identify compliance gaps, risks, and ambiguities early and proactively drive remediation plans.
  • Provide clear guidance to technical teams on how to meet control requirements in practical, scalable ways.
  • Review and validate control implementations and supporting documentation produced by other contributors.
  • Help establish and reinforce consistent compliance practices, patterns, and standards across environments.
  • Communicate effectively with both technical and non-technical stakeholders, translating complex requirements into actionable guidance.
  • Operate with a strong bias toward execution, progress, and outcomes in fast-moving or imperfect environments.
Required Qualifications
  • 8+ years of experience in security, compliance, or risk management roles within regulated or federal-aligned environments.
  • Strong hands-on experience supporting FedRAMP and/or CMMC initiatives, including control mapping and implementation support.
  • Demonstrated ability to translate compliance frameworks into real technical and operational controls.
  • Experience working directly with cloud environments (e.g., AWS, Azure, or GCP), including security-relevant services such as IAM, logging, encryption, monitoring, and vulnerability management.
  • Proven ability to operate independently and lead compliance execution without heavy oversight.
  • Comfort working in ambiguous environments and making sound judgment calls.
  • Experience supporting audits, assessments, or readiness activities.
  • Strong written and verbal communication skills, with the ability to explain compliance concepts clearly to engineering and leadership audiences.
 
  • Preferred Qualifications
  • Experience working in federal, DoD, or defense-adjacent environments.
  • Familiarity with AWS GovCloud and/or Azure Government.
  • Experience supporting compliance in cloud-native or hybrid environments.
  • Prior involvement in environments pursuing or maintaining ATOs.
  • Experience collaborating with external assessors, auditors, or third-party partners.
  • Background in environments where security, compliance, and engineering work closely together.