CMMC Senior Consultant (Cybersecurity Maturity Model Certification)

Thanks for the click. We know your time is valuable so we will get right to it.

We’ve amassed some of the best and brightest minds in cyber security who are passionate about protecting the digital world. Our team blends advanced technology alongside deep expertise to tackle the toughest cyber threats out there. Put simply, our mission is to stay ahead of the curve and create a safer digital landscape for our partners, and we think adding a CMMC Senior Consultant (Cybersecurity Maturity Model Certification) will up our cyber game.

This position is responsible for ensuring organizations meet the cybersecurity standards set by the United States Department of Defense (DoD). The ideal candidate will have a thorough understanding of the CMMC framework and will utilize this knowledge to facilitate comprehensive cybersecurity solutions for our business.
Applicants must have prior experience performing CMMC readiness assessment, CMMC pre-audit preparation work within Microsoft GCCH high and/or Amazon Gov Clouds.

Role Overview.

This role sits at the intersection of endpoint security, device management modernization, Azure platform security, and advisory delivery. You will operate as a technical authority for both clients and internal teams—helping define target-state endpoint and remote management architectures, evaluate security and operational tradeoffs, and guide decisions that balance risk, usability, and supportability.

A primary thread across this work is Azure Virtual Desktop (AVD), which connects endpoint posture, identity, network design, and platform controls into a coherent service model. You will be expected to understand how endpoint security and management decisions affect virtual desktop delivery, user experience, and operational resilience.

The position carries a high degree of trust and autonomy. You will be expected to influence direction, challenge assumptions, and take responsibility for outcomes—not simply execute predefined tasks.

What you’ll be doing.

• Scope and conduct comprehensive assessments of customer networks and systems to identify compliance gaps and/or confirm they meet the required CMMC level requirements.
• Advise clients on Microsoft GCCH and Amazon Gov cloud boundary scopes, SSP documentation and best practices.
• Work with customers to design and implement security measures and controls, in line with CMMC standards, to protect sensitive data and systems from exploit.
• Coordinate with various customer teams to develop and implement the action plans necessary to achieve CMMC compliance.
• Clearly articulate the CMMC program to customer stakeholders at all levels to ensure understanding and adherence to cybersecurity best practices.
• Assist customers with the review and update of existing security policies and procedures to align with evolving CMMC requirements and best practices in cybersecurity.
• Prepare detailed reports on the status of an organization's CMMC compliance.
• Keep abreast of the latest cybersecurity threats and trends, as well as updates to the CMMC framework.
• Achieve utilization targets, complete projects on time and budget, and meet quality standards.
• Execute project delivery, scheduling, and other coordination of internal and customer resources to conduct interviews, meetings, and presentations.
• Prepare and deliver insightful, professional subject matter presentations to both customers and internal SilverSky stakeholders.
• Become knowledgeable and support the continued development of SilverSky’s service offerings, marketing materials, statement of work (SOW) structure, methodologies, delivery standards, work tools, and processes.
• Pursue additional education and stay current on best practices, technical skills, and tools related to the position's duties.
• This position has significant interaction with internal and external stakeholders, including colleagues, customers, partners and subcontractors. This position requires a strong customer service orientation and the ability to work independently on a variety of consulting projects simultaneously.
• The ideal candidate must demonstrate strong organizational abilities, effective writing skills, communications skills, and identify and manage client engagement risks and issues.

What does it take to succeed in this role?

• Bachelor’s degree in information technology, Computer Science, or 4+ years of equivalent experience in IT security, risk management, or compliance.
• Prior experience working with Microsoft GCCH and AWS Gov clouds is required.
• Current certification as a Certified CMMC Professional (CCP) is highly preferred, or the ability to achieve CCP credential under the CMMC version 2.0 framework within an agreed period.
• The desire to achieve a Certified CMMC Assessor (CCA) credential under the CMMC version 2.0 framework is required.
• In-depth knowledge of the CMMC framework, NIST SP 800-171, and DFARS 252.204-7012 regulations is required.
• Excellent problem-solving skills and the ability to function effectively under pressure.
• Superior communication skills with the ability to explain complex security concepts to non-technical staff.
• Ability to lead projects and drive them to completion.
• Self-starters who can work independently, seek out and leverage internal resources when needed, proactively take ownership of their work and career, and drive engagements to provide the value our customers expect
• Relevant experience and prior success leading and delivering consulting engagements
• Relevant technical training, project management training, and certifications such as CISSP
• Excellent analytic and problem-solving skills, especially in the information systems, security, and privacy space
• Highly effective verbal communications and presentation skills in a customer setting
• Excellent technical written communication skills, in particular, regarding information system, security and privacy subject matter, policies and procedures

What are desirables?

• In addition to technical cybersecurity experience and skills, the candidate must demonstrate they possess the soft skills required to drive engagement with customers. The candidate must have experience successfully managing projects, meeting deadlines, and achieving high levels of quality based on standards.

Work Arrangement

This is a remote position based in the United States. Candidates must be available to attend onsite meetings or work from the office as needed.

Applicants must be legally authorized to work in the United States and must not require current or future visa sponsorship.

How we work.

Our 3 values define how we operate internally as well as externally:

Vision - We embrace a forward-thinking mindset. Our team has a clear and inspiring picture of the future that helps drive our decisions towards creating and delivering world-class security services.

Velocity - We have a bias for action. We move swiftly and with purpose toward our goals and objectives and can easily adapt (and adjust) along the way.

Vigilance – We foster a culture of proactive awareness for our company and our customers, who trust us to be an extension of their team. We are always looking for areas where we can innovate, improve, fix, transform and revolutionize, which ensures the protection, safety and success of everyone at SilverSky.

Individuals that can act intelligently and confidently without an ego will thrive.

If this opportunity sounds interesting and you are passionate about redefining how the world thinks about cyber security, we want to hear from you. Apply now if you are interested in learning more about how we can change the rules of engagement, together.

About SilverSky

We are a global cyber security company with more than 20 years of professional experience in the industry. Our 300+ employees are on a mission to protect our customers with comprehensive, adaptive security services that maximize technology and automate responses, while empowering security analysts to hunt for threats, react and respond immediately. It’s the human enhanced response that differentiates SilverSky and allows us to create the most comprehensive managed detection and response (MxDR) solution in the industry by delivering on our Vision, Velocity, Vigilance philosophy. Follow us on X and LinkedIn to learn more.