• Own CMMC L2 certification and FedRAMP High authorization efforts end-to-end, including gap analysis, remediation tracking, evidence collection, and assessment coordination • Maintain compliance with DFARS cybersecurity clauses (7012, 7019, 7020), ITAR, EAR and other federal requirements; manage SPRS score and supplier requirements • Develop and maintain System Security Plans, POA&Ms, policies, procedures, and supporting artifacts across all compliance frameworks • Serve as primary point of contact for C3PAO/3PAO assessors, government customers, prime contractors, and agency authorizing officials • Manage continuous monitoring activities including vulnerability scanning, access reviews, evidence collection, and monthly/annual reporting • Monitor regulatory changes across CMMC, FedRAMP, NIST 800-171/800-53, DFARS, and ITAR; assess impact and drive necessary updates • Implement security controls hands-on, including identity and access management, logging, encryption, and endpoint security • Harden cloud infrastructure in GCP, AWS, implementing security configurations and access controls aligned with compliance requirements • Build automation and tooling for evidence collection and compliance reporting; integrate security into CI/CD pipelines • Define, document, and enforce CUI boundaries and enclave architecture • Translate compliance requirements into actionable technical guidance for engineering teams • Support customer security assessments, due diligence requests, and contract security requirements