Engineering Manager

Compliance Consulting:

• Support proposal development as a technical SME by identifying solutions, estimating time and resources, and participating in discovery and scoping
• Prepare organizations for C3PAO assessments and provide certification readiness reviews
·       Develop customized remediation roadmaps scaled to client size, budget, and technical capabilities
• Manage resource allocation and workload distribution across concurrent client engagements

Cloud Security Solutions consulting:

• Design right-sized Microsoft, AWS or GCP security solutions appropriate for small business through enterprise clients.
• Implementation knowledge of Microsoft security solutions like Defender, Purview, Sentinel etc..
• Guide clients on Azure Government vs. commercial cloud decisions based on CMMC requirements

Team Leadership & Practice Development:

• Build and mentor a team of 4-6 security consultants with diverse skill sets and experience levels
• Develop standardized methodologies, playbooks, and procedures for technical delivery
• Establish quality assurance processes and peer review mechanisms for client deliverables
• Create training programs to elevate team capabilities in CMMC and Microsoft security technologies
• Foster culture of client success, technical excellence, and continuous learning

Practice Growth & Thought Leadership:

• Identify opportunities to expand consulting services and develop new offerings
• Contribute to business development activities and proposal responses
• Represent the practice at client events
• Develop thought leadership content on CMMC implementation best practices
• Build relationships with Microsoft partners, C3PAOs, and industry organizations
• Stay current on CMMC program updates and DoD cybersecurity requirements

Required Qualifications:

• Bachelor’s degree in computer science, Information Security, or related field (Master's preferred)
• 10+ years of progressive in information security and compliance, with significant consulting experience
• 4+ years managing security consultants with proven track record of team productivity
• Deep expertise in securing complex cloud environments, threat modeling, and risk assessment
• Strong cross-functional collaboration skills, balancing security requirements with business objectives
• Clear and persuasive communicator in both writing and verbal settings
• Low ego, high empathy leader who attracts talent and builds diverse, inclusive teams
• Passionate about developing engineers' careers in a supportive yet challenging environment
• 5+ hands-on experience implementing Microsoft security solutions across varied environments
• Experience translating technical requirements into business terms for non-technical stakeholders
• Holds any Microsoft security certifications (SC-200, SC-300, SC-400, AZ-500)

Technical Competencies:

• Azure and Azure Government cloud security configurations
• Microsoft Defender suite deployment and optimization
• Microsoft Purview, Azure Information Protection, and data classification strategies
• Microsoft Sentinel and cost-effective SIEM alternatives
• Identity and Access Management solutions (Azure AD, Conditional Access)
• Network segmentation and boundary protection strategies
• Security documentation and technical writing

Preferred Certifications:

• CISSP, CISM, or equivalent security leadership certification
• Additional relevant certifications (Security+, CISA, GCIH, GIAC)

Key Competencies:

• Client Relationship Management: Build trust and credibility with stakeholders at all organizational levels
• Adaptive Communication: Translate technical concepts for audiences from small business owners to enterprise CISOs
• Scalable Solutions Design: Right-size security programs based on organizational maturity, resources, and risk tolerance
• Business Acumen: Balance security requirements with operational realities and budget constraints
• Project Leadership: Manage complex, multi-phase engagements with competing priorities and timelines
• Mentorship: Develop junior consultants and elevate overall team capabilities
• Problem-Solving: Navigate unique challenges across diverse client environments and technical landscapes