cmmc jobs in San Diego

As a Research Cybersecurity Analyst, you will review research contracts, proposals, and data-use agreements to identify security and compliance requirements, then conduct risk assessments and recommend practical safeguards. You will coordinate security controls across cloud and on-premises research environments, assess architectures for identity management, encryption, and network segmentation, and develop compliance documentation (SSPs, POA&Ms) for sponsor audits and CMMC readiness.…See more You will work with researchers, IT teams, and compliance partners to interpret regulatory requirements, map them to controls, and explain technical security obligations in practical terms to non-technical stakeholders. Experience in NIST frameworks, security assessments, vulnerability management, and regulated environments (higher education, research, healthcare, government, defense) is especially valued.

Lead large, multi-workstream enterprise technology programs including ERP rollouts, cloud migrations, identity/security initiatives, and system integrations from planning through go-live and stabilization. Define program structure, roadmap, and delivery strategy; coordinate multiple project managers and vendor teams; drive technical delivery conversations across architecture, data migration, security, and testing; establish governance and executive reporting; own risk management and budget accountability; and mentor junior program managers.…See more Requires 8+ years of program management experience with 5+ years leading complex multi-workstream technology programs and proven delivery of large-scale enterprise initiatives through go-live.

This role supports research teams at a university by reviewing security requirements in research contracts and proposals, conducting risk and compliance assessments, and recommending practical security approaches. The analyst will coordinate security controls across cloud and on-premises research environments, assess security architectures and configurations, and develop compliance documentation including SSPs and POA&Ms.…See more The role requires interpreting cybersecurity frameworks (NIST SP 800-171, CMMC, NIST SP 800-53) and communicating technical requirements to researchers and non-technical stakeholders across identity and access management, encryption, vulnerability management, and network security.

Research Cybersecurity Analyst at San Diego State University responsible for reviewing research proposals, contracts, and data-use agreements to identify cybersecurity and compliance requirements; conducting risk assessments and recommending remediation strategies; coordinating security controls across cloud and on-premises research environments; and developing compliance documentation (SSPs, POA&Ms) to support audits and assessments. The role requires interpreting security frameworks (NIST SP 800-171, CMMC, NIST SP 800-53) and communicating technical requirements to researchers and non-technical stakeholders while evaluating security architectures, access controls, encryption, and vulnerability management.See more

This is a hands-on DevSecOps engineering role focused on designing and maintaining secure CI/CD pipelines, software supply-chain controls, and Kubernetes deployment standards. The engineer will work across Azure DevOps, Nexus, SonarQube, and container orchestration to integrate security and quality checks into build and release workflows, support platform engineering teams, and enable developers with documentation and automation.…See more Responsibilities include implementing SAST, SCA, dependency scanning, secrets management, artifact controls, and compliance alignments (NIST, CMMC, RMF, Zero Trust); troubleshooting pipeline and deployment failures; and creating runbooks and guardrails. The role requires 5+ years in DevOps/DevSecOps, hands-on Azure DevOps and Kubernetes experience, scripting proficiency, and an active Secret Clearance with eligibility for TS/SCI.

IT Operations Specialist supporting IT operations by managing service tickets, user requests, and IT compliance workflows while maintaining adherence to CMMC (Cybersecurity Maturity Model Certification) requirements. Responsibilities include ticket management, user account lifecycle administration, access control enforcement, technical documentation maintenance, and project execution.…See more Requires 3–5 years of IT experience (preferably in compliance/governance/risk management), 1–2 years of project management experience, and proficiency with Jira, Confluence, and Tableau.

Principal System Architect responsible for designing and maintaining a complex enterprise automation ecosystem spanning RPA, Machine Learning, and GenAI across multiple business units. The role requires architecting data pipelines integrating diverse systems (SAP, ERP, QMS, PLM tools like Windchill), leading automated workflow solutions (ECPs, QA defect prediction, EVMS reporting), and ensuring end-to-end cybersecurity compliance with DoD standards, CMMC, and Zero Trust architectures.…See more This is a senior technical leadership position requiring 14+ years of IT system architecture experience, deep expertise in intelligent automation and ML/AI, and the ability to mentor teams and present technical strategies to executive stakeholders.

A senior DevSecOps engineer will design and operate an automated compliance and AI-driven security platform for DoD and federal healthcare environments. The role demands expertise in DISA STIG automation, container security, RMF/FedRAMP workflows, and SIEM/SOAR integration, with responsibilities spanning secure CI/CD pipeline development, Wazuh and Elastic Stack deployment, OpenRMF automation, and LLM-assisted security operations.…See more The engineer will build hardened base images, maintain compliance pipelines, develop Tines SOAR workflows, and mentor others on architecture decisions.

Design, develop, and test secure software using C++, Java, C#, or similar languages, creating novel cybersecurity technology components to defend against cyber exploits and attacks. Responsibilities include developing kernel and user-level software with security-first principles, conducting vulnerability assessments, implementing CI/CD and DevSecOps processes, and using Infrastructure as Code tools like Ansible and Terraform to deploy and configure systems.…See more Perform code reviews, validate security controls (STIGs, CMMC), participate in Risk Management Framework processes, and document software for accreditation. Partner with multidisciplinary teams and government sponsors to integrate custom and third-party components across complex systems.

This Security Engineer role owns continuous cloud security posture management (CSPM) and vulnerability management across AWS accounts, detecting misconfigurations and driving remediation at scale. The person will build reusable Terraform modules, Service Control Policies, and policy-as-code guardrails to make secure-by-default infrastructure; design least-privilege IAM; govern secrets and encryption; and build cloud-native detections (CloudTrail, GuardDuty, Config, Security Hub) with automated remediation.…See more They'll map technical controls to compliance frameworks (CMMC, NIST SP 800-171, FedRAMP), support the SOC team investigating cloud incidents, and feed findings back into new guardrails. The role requires 3+ years of hands-on cloud security or DevSecOps experience, strong AWS expertise, Terraform and policy-as-code proficiency, and the ability to obtain a U.S. security clearance.

The Manager of Digital Transformation will lead engineering teams through AI and automation initiatives at a defense shipbuilder, identifying practical use cases and coordinating proofs-of-concept for secure, compliant automation. The role requires 7+ years in engineering or technical environments with 3+ years of team leadership, plus strong change-management capabilities to guide stakeholders through organizational and technological transitions.…See more The manager will translate engineering needs into scalable solutions, manage platform stewardship, compliance frameworks (FedRAMP, ITAR/EAR, CMMC/NIST), and enterprise platform procurement. Success demands technical knowledge of engineering workflows, data governance, multi-system integration, and emerging AI/automation technologies, paired with exceptional communication and conflict-resolution skills.

This role supports the development, implementation, and maintenance of IT compliance programs, policies, and procedures aligned with regulations including NIST 800-171, DFARS, CMMC, and ISO 27000 Series. The position conducts internal assessments, manages external audits by government agencies and third-party assessors, and works cross-functionally to ensure systems meet compliance requirements.…See more Responsibilities include monitoring regulatory changes, developing compliance reports and presentations, investigating violations, and serving as the primary point of contact for IT compliance inquiries. The role requires 10+ years of progressive experience in information assurance or a related field, ability to obtain a DoD security clearance, and certifications such as CompTIA Security+, CISSP, or higher.

Senior systems administrator responsible for managing installation, configuration, updates, monitoring, and troubleshooting of enterprise and tactical IT infrastructure. Lead security hardening efforts aligned with CMMC and DISA STIG standards, vulnerability remediation, backup/recovery procedures, and network infrastructure including routers, firewalls, and VPNs.…See more Provide technical leadership to teams of administrators and coordinate across cybersecurity, engineering, and program stakeholders. Support tactical data pipelines, containerized workloads, and edge server environments.

A senior technical architect role responsible for designing cloud and security solutions for multi-client MSP environments, conducting technical quality assurance across engineering teams, and establishing configuration standards and documentation. The role requires 5+ years of hands-on infrastructure/cloud/security/identity experience with deep expertise in Azure, Entra ID, and the Microsoft Defender/Security suite, plus demonstrated ownership-level depth across endpoint protection, RMM, network/firewall, and VDI platforms.…See more The architect will mentor junior engineers, sanity-check technical feasibility and scope, and validate Statements of Work before client delivery while owning the technical planning for complex multi-workstream projects.

Principal Systems Architect responsible for defining and maintaining the technical architecture of a complex enterprise automation ecosystem spanning RPA, Machine Learning, and GenAI. Will architect data pipelines integrating diverse enterprise systems (SAP, ERP, QMS, PowerBI, Windchill, Atlassian), provide technical leadership on workflow automation and DevSecOps infrastructure, and ensure end-to-end cybersecurity compliance with DoD standards and CMMC.…See more Role requires 14+ years of progressive IT systems architecture experience, demonstrating systems engineering expertise in complex data integration, AI/ML automation, and secure deployment across engineering, manufacturing, quality, and finance domains.

Senior Systems Engineer responsible for designing, implementing, securing, and optimizing enterprise Microsoft 365 and Azure environments for government and commercial clients. You will architect and deploy M365 services (Exchange Online, SharePoint, Teams, Intune, Entra ID) and Azure infrastructure (VMs, networking, storage, AVD, monitoring), lead cloud migrations and hybrid identity configurations, and develop security baselines and Zero Trust policies.…See more The role requires advanced PowerShell scripting, Infrastructure-as-Code practices, troubleshooting complex identity and cloud issues, and mentoring junior engineers while collaborating with security teams and stakeholders.

Senior systems administrator responsible for providing technical guidance and coordination across infrastructure, security, and engineering teams in a mission-focused environment. Will mentor administrators and end users, document technical solutions, and lead issue resolution across Windows/Linux systems, virtualization, networking, and cloud platforms.…See more Requires extensive experience in enterprise/government IT infrastructure, system hardening, cybersecurity compliance (CMMC, DISA STIG), and strong communication with technical and non-technical stakeholders.

This Systems Administrator II role supports containerized and cloud-based infrastructure for a defense-focused technology company. The administrator will maintain system documentation, configuration records, software inventories, and license tracking while supporting both Windows and Linux environments, networking infrastructure, and cybersecurity hardening.…See more Required experience includes Linux command-line proficiency, system configuration and troubleshooting, networking protocols (TCP/IP, DNS, DHCP, VPNs, firewalls), and cybersecurity practices. Preferred qualifications include containerization technologies (Docker, Kubernetes), edge computing hardware, cloud platforms (AWS, Azure), shell scripting, and tactical systems support.

The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.…See more The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.

The Information Systems Security Manager will develop, implement, and maintain the company's information security policies and compliance programs aligned with NIST SP 800-171, DFARS, ISO 27001, and CMMC requirements. Responsibilities include overseeing Controlled Unclassified Information (CUI) and classified information protection, conducting risk assessments and vulnerability analyses, leading incident response efforts, and serving as primary liaison with government agencies on compliance matters.…See more The role requires 7+ years of information security management experience with at least 3 years in a leadership position, and extensive knowledge of defense industry security standards and classified information handling protocols. The ISSM will collaborate with DevSecOps, IT, and engineering teams to integrate security controls across operations and maintain continuous Authority to Operate (cATO) pipelines.

Senior DevOps Build Engineer responsible for designing, building, and maintaining CI/CD pipelines that compile, test, package, and publish software across defense and government contract programs. The role owns build automation, release engineering, artifact management, and container registries end-to-end, while integrating security and compliance checks directly into the build process.…See more Requires 8+ years of hands-on experience with CI/CD tools (GitLab CI, GitHub Actions, Jenkins), strong scripting skills in Python and Bash, and proficiency with containerization, artifact management, and cloud platforms (AWS or Azure). The engineer will partner with development, security, and compliance teams to deliver self-service tooling and standardize builds across unclassified and controlled unclassified environments.

Senior DevOps Build Engineer responsible for designing and maintaining CI/CD pipelines, build automation, and artifact management systems across defense and government contract programs. The role owns end-to-end build and release engineering, standardizing compilation, packaging, versioning, and promotion across unclassified and controlled environments while integrating security and compliance checks into the build process.…See more Key responsibilities include pipeline design (GitLab CI, GitHub Actions, Jenkins), artifact repository management, build tooling development (Bash, Python, Bazel, Gradle), container image management, and infrastructure provisioning using Terraform. The position requires 8+ years of build/release engineering or DevOps experience, strong scripting skills, and U.S. citizenship with the ability to obtain a security clearance.

A Junior Operating Systems Engineer will build and maintain custom Linux images using Yocto Project (recipes, layers, BitBake, kernel configuration), supporting immutable A/B-updatable OS architectures with secure boot and update tooling. The role involves packaging, integrating, and troubleshooting system services, drivers, and third-party software on embedded x86 hardware, as well as contributing to OS hardening (FIPS mode, secure boot, compliance configuration).…See more Daily use of generative AI tools will accelerate development tasks including recipe writing, test scaffolding, and debugging. The engineer will debug boot, kernel, driver, and userspace issues on real appliance hardware and document build processes, image releases, and provisioning workflows.

This role leads enterprise IT infrastructure and operations for a defense technology company, overseeing networks, cloud environments, endpoints, identity and access management, and end-user services. The Director will develop IT strategy aligned with DoD customer requirements, advise leadership on cybersecurity risk and IT modernization, and ensure compliance with CMMC, NIST SP 800-171, DFARS, and RMF standards.…See more Responsibilities include managing IT governance, disaster recovery, vendor relationships, budgets, and supporting protection of Controlled Unclassified Information through security assessments and incident response. The role requires leading and mentoring IT and DevOps teams managing infrastructure including cloud environments.

This Staff IT Engineer role supports secure enterprise environments serving government missions, with primary responsibility for implementing, administering, and optimizing Microsoft infrastructure technologies including Windows Server, Active Directory, Group Policy, SCCM, DNS, DHCP, file services, and print services. The candidate will provide Tier 2/3 support, troubleshoot complex infrastructure issues, perform system maintenance and patching, manage endpoint compliance, and ensure compliance with federal cybersecurity frameworks (NIST, RMF, CMMC).…See more The role requires at least 3 years of hands-on experience with on-premises Microsoft infrastructure in enterprise environments and an active Top Secret security clearance.