CMMC Consultant

About the Role: We are seeking a hands-on CMMC implementation professional who has led Microsoft 365 GCC High migrations and performed the technical remediation required to bring defense contractors into compliance with NIST SP 800-171. This is not a purely advisory role. You will work directly in client tenants configuring controls, executing migrations, and closing POA&M items, while also helping us scope and price engagements based on real implementation experience. This is a flexible, remote, part-time contract role with potential to grow as our client base expands. What You'll DoMigration and Implementation

• Lead end-to-end Microsoft 365 GCC High migrations, from tenant provisioning and identity setup through data migration, cutover, and post-migration validation
• Design and build CUI enclaves or full-tenant GCC High environments based on client scope
• Implement NIST SP 800-171 controls across Entra ID, Intune, Purview, Defender, and related Microsoft security tools
• Configure Conditional Access, MFA, device compliance, data loss prevention, sensitivity labeling, audit logging, and encryption to meet CMMC Level 2 requirements
• Remediate gaps identified during assessments and drive POA&M items through to closure
• Produce technical documentation and evidence that supports SSP accuracy and assessment readiness Assessment, Scoping, and Advisory
• Conduct gap assessments against NIST SP 800-171 and CMMC Level 2 requirements
• Define CUI scope and recommend enclave or full-tenant approaches
• Lead or support discovery and scoping calls with prospective defense contractor clients
• Translate findings into effort estimates, timelines, and fixed-fee pricing grounded in actual implementation effort
• Develop SOWs, proposals, and standardized migration and remediation service packages
• Guide clients on SSP and POA&M development and SPRS scoring
• Strengthen our internal implementation runbooks and estimating methodology

Pay Range: $75 – $125 per hour, based on experience