Information Technology Manager
About The Position
The IT Manager – Secure Mission Environments plans, implements, and maintains secure IT systems operating in regulated defense and government contracting environments. The role connects daily IT operations with compliance obligations under CMMC, NIST SP 800-171, and CUI handling requirements. The manager is accountable for software and hardware asset management, system administration operations, system security, and regulatory readiness across enclave environments. The position includes direct personnel management of 6 or more FTEs, timecard management, and direct-charge compliance. The manager coordinates with vendors and internal stakeholders on enclave management and performs hands-on system administration as needed to cover vacancies or staff leave. The manager maintains and improves the System Security Plan (SSP), tracks and remediates POA&M items, coordinates CMMC assessments, prepares evidence packages, and conducts readiness reviews. The role also oversees security and infrastructure controls, incident response, stakeholder coordination, leadership briefings, and mentoring of junior IT staff.
Requirements
- Master's degree and at least 6 years of relevant experience; or a bachelor's degree in a related specialized area or equivalent relevant experience and at least 8 years of relevant experience.
- U.S. citizenship is required due to the nature of work performed within the facilities.
Responsibilities
- Manage 6 or more FTEs, including timecards and direct-charge compliance.
- Coordinate with vendors and internal stakeholders on enclave management duties.
- Perform hands-on system administration as needed to cover vacancies or staff leave.
- Maintain and continuously improve the System Security Plan (SSP) in alignment with NIST SP 800-171 Rev 2/3 and CMMC Level 2/3 practices.
- Track and remediate POA&M items, ensuring timely closure before assessment windows.
- Coordinate with a C3PAO or government assessor for CMMC assessments; prepare evidence packages and conduct readiness reviews.
- Implement access control, media protection, audit and accountability, and configuration management controls per CMMC practice families.
- Conduct periodic self-assessments and gap analyses, and maintain the SPRS score submission.
- Manage endpoint security, patch management, and vulnerability remediation across unclassified enterprise environments.
- Oversee IAM policies, including MFA, least-privilege enforcement, and periodic access reviews.
- Administer network segmentation between CUI-scoped and non-CUI environments and enforce boundary protection controls.
- Coordinate incident response activities and maintain and test the Incident Response Plan (IRP).
- Evaluate and implement security tools, SIEM integrations, and automated compliance monitoring in coordination with the SOC team.
- Serve as the primary IT administration and compliance liaison to senior leadership.
- Brief leadership regularly on compliance posture, risk exposure, and program impacts.
- Lead local cross-functional coordination among IT, Engineering, Finance, Legal, and Program Management on compliance-impacting decisions.
- Mentor junior IT staff on security practices, tool administration, and compliance requirements.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Manager
