Compliance Enablement Engineer

Dark Wolf is seeking a Compliance Enablement Engineer to join our team. The successful candidate will have a strong understanding of risk management and compliance requirements, particularly applicable to the Defense Industrial Base (DIB). As a Compliance Enablement Engineer, you will leverage your consulting, risk assessment, and vulnerability management experience to identify gaps and integrate compliance requirements into engineering workflows. Acting as the bridge between regulatory requirements, such as NIST 800-171, and mission-critical execution, you will support organizations required to comply with national and DoW requirements (EO 14028, EO 14144, CHIPS Act, NDAA, NIST, CMMC, etc.). Key responsibilities may include but are not limited to:

• Act as a consultant and strategic advisor to DIB organizations, translating National, Federal, and DoW policy requirements into actionable, engineering-focused implementation plans.
• Conduct risk assessments that go beyond identifying gaps—provide hands-on guidance to mitigate findings and implement technical controls that align with CMMC Level 2 and Level 3 standards.
• Evaluate and enhance vulnerability management programs, cloud security architectures, and data integrity processes to determine their effectiveness in identifying and mitigating security weaknesses, ensuring they meet federal standards. 
• Partner with developers, cloud engineers, and mission owners to ensure requirements are baked into the "Design-Build-Run" lifecycle of every capability.
• Apply Human-Centered Design (HCD) principles to policies and procedures, making compliance intuitive and less burdensome for the end-user.

Required Qualifications:

• 6+ years of relevant experience in risk management, gap analysis, process engineering, or similar functions.
• Deep technical understanding of NIST 800-171 Rev 2 and the CSF 2.0 framework (specifically CMMC Level 2 and Level 3 requirements).
• Experience assessing security risks in cloud-native environments (AWS, Azure, or GCP). Ability to not just find problems, but to engineer solutions that help teams navigate the path to production efficiently.
• Strong verbal and written skills to translate complex regulatory language into technical tasks for engineering teams.
• Bachelor’s degree in Computer Science, Statistics, Mathematics, or a related technical field.
• US Citizenship and the ability to obtain a Secret security clearance.

Preferred Qualifications:

• Previous experience supporting DoD, IC, or Fed Civilian missions with a focus on DIB supply chain security.
• CMMC Registered Practitioner (RP) or CCP/CCA; CISSP, CISA, CISM, Security+, or equivalent.
• Familiarity with OSCAL (Open Security Controls Assessment Language) or other compliance-automation tools.
• Experience with risk management tools and techniques.

This position will be supported at a hybrid capacity at any of the following DW Office locations: Herndon, VA, Omaha, NE, Colorado Springs, CO, Tampa, FL. 

The estimated salary range for this position is $120,000.00 - $150,000.00, commensurate on experience and technical skillset. 

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.