Compliance Enablement Engineer

Dark Wolf Solutions • Herndon, VA

6h • $120,000 - $150,000 • Hybrid

About The Position

Dark Wolf is seeking a Compliance Enablement Engineer to join our team. The successful candidate will have a strong understanding of risk management and compliance requirements, particularly applicable to the Defense Industrial Base (DIB). As a Compliance Enablement Engineer, you will leverage your consulting, risk assessment, and vulnerability management experience to identify gaps and integrate compliance requirements into engineering workflows. Acting as the bridge between regulatory requirements, such as NIST 800-171, and mission-critical execution, you will support organizations required to comply with national and DoW requirements (EO 14028, EO 14144, CHIPS Act, NDAA, NIST, CMMC, etc.). Key responsibilities may include but are not limited to:
Act as a consultant and strategic advisor to DIB organizations, translating National, Federal, and DoW policy requirements into actionable, engineering-focused implementation plans.
Conduct risk assessments that go beyond identifying gaps—provide hands-on guidance to mitigate findings and implement technical controls that align with CMMC Level 2 and Level 3 standards.
Evaluate and enhance vulnerability management programs, cloud security architectures, and data integrity processes to determine their effectiveness in identifying and mitigating security weaknesses, ensuring they meet federal standards.
Partner with developers, cloud engineers, and mission owners to ensure requirements are baked into the "Design-Build-Run" lifecycle of every capability.
Apply Human-Centered Design (HCD) principles to policies and procedures, making compliance intuitive and less burdensome for the end-user.

Requirements

• 6+ years of relevant experience in risk management, gap analysis, process engineering, or similar functions.
• Deep technical understanding of NIST 800-171 Rev 2 and the CSF 2.0 framework (specifically CMMC Level 2 and Level 3 requirements).
• Experience assessing security risks in cloud-native environments (AWS, Azure, or GCP). Ability to not just find problems, but to engineer solutions that help teams navigate the path to production efficiently.
• Strong verbal and written skills to translate complex regulatory language into technical tasks for engineering teams.
• Bachelor’s degree in Computer Science, Statistics, Mathematics, or a related technical field.
• US Citizenship and the ability to obtain a Secret security clearance.

Nice To Haves

• Previous experience supporting DoD, IC, or Fed Civilian missions with a focus on DIB supply chain security.
• CMMC Registered Practitioner (RP) or CCP/CCA; CISSP, CISA, CISM, Security+, or equivalent.
• Familiarity with OSCAL (Open Security Controls Assessment Language) or other compliance-automation tools.
• Experience with risk management tools and techniques.

Responsibilities

• Act as a consultant and strategic advisor to DIB organizations, translating National, Federal, and DoW policy requirements into actionable, engineering-focused implementation plans.
• Conduct risk assessments that go beyond identifying gaps—provide hands-on guidance to mitigate findings and implement technical controls that align with CMMC Level 2 and Level 3 standards.
• Evaluate and enhance vulnerability management programs, cloud security architectures, and data integrity processes to determine their effectiveness in identifying and mitigating security weaknesses, ensuring they meet federal standards.
• Partner with developers, cloud engineers, and mission owners to ensure requirements are baked into the "Design-Build-Run" lifecycle of every capability.
• Apply Human-Centered Design (HCD) principles to policies and procedures, making compliance intuitive and less burdensome for the end-user.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level