Position Overview
AMT Integrated Solutions seeks a Cybersecurity & CMMC Compliance Specialist to lead cybersecurity compliance and help safeguard sensitive customer and government-related information across our aerospace and defense manufacturing operations. The primary responsibility is implementing, maintaining, and documenting applicable CMMC, NIST SP 800-171, and Department of Defense cybersecurity requirements. This role requires effective communication with both technical and non-technical stakeholders, efficient problem-solving skills, and the ability to deliver both individual and team-based results.
Essential Duties & Responsibilities
1. Cybersecurity and Compliance:
Implement and maintain applicable NIST SP 800-171 security requirements and CMMC Level 2 practices.
- Perform control gap assessments, track remediation priorities, and validate corrective actions.
- Develop and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, and objective evidence.
- Coordinate CMMC readiness activities, self-assessments, third-party assessments where applicable, and accurate SPRS submissions.
- Identify and safeguard Controlled Unclassified Information (CUI) and Federal Contract Information (FCI).
- Manage vulnerability assessments, incident response planning, security awareness training, and cybersecurity risk reporting.
- Work with leadership, external cybersecurity specialists, managed IT providers, and assessors to close compliance gaps.
2. IT and Manufacturing Systems Security:
- Support secure administration of servers, networks, firewalls, endpoints, user accounts, and multifactor authentication.
- Coordinate patching, endpoint protection, backups, disaster recovery testing, and business continuity planning.
- Support secure operation of JobBOSS2 and other essential business applications.
- Assess and help protect CNC-connected equipment, production networks, and manufacturing technology without unnecessarily disrupting operations.
- Troubleshoot security-related IT issues and coordinate rapid resolution of production-impacting incidents.
3. System Installation, Maintenance, & Troubleshooting:
Install, configure, upgrade, and maintain a wide range of software and hardware. Diagnose and resolve system errors, perform system updates, and coordinate with vendors as needed for advanced troubleshooting and software updates.
4. Application Support & Training:
Provide hands-on support and user training for applications such as Microsoft Office 365 (with emphasis on SharePoint), E2, WordPerfect, Cyber Security Defense platforms, and Windows operating systems.
5; Continuous Improvement:
Maintain up-to-date knowledge of industry-standard software and hardware solutions. Proactively recommend and implement process improvements to enhance system reliability and user productivity.
Qualifications & Skills
Required:
- At least 2 years of relevant cybersecurity, IT security, or government contractor compliance experience.
- Practical knowledge of NIST SP 800-171, CMMC Level 2, CUI handling, and applicable DFARS cybersecurity provisions.
- Demonstrated experience implementing security controls and preparing compliance documentation, including SSPs or POA&Ms.
- Proficiency with Windows systems, networking fundamentals, endpoint protection, firewalls, and access controls.
- Organized, resourceful, and proactive in addressing technical challenges.
Preferred:
- Familiarity with AS9100 quality systems and manufacturing IT / operational technology.
- Knowledge of government compliance and annual regulatory requirements.
Work Environment
- On-site position. Remote work is not available.
- Standard hours: 7:00 am to 3:30 pm, Monday through Friday; overtime as needed.
Security Clearance & Work Authorization
- U.S. citizenship required.
- Must be able to obtain and maintain a Secret Level security clearance if necessary.
