SteelGate LLC is seeking an experienced, highly qualified Lead CMMC Certified Assessor (LCCA) to lead formal Department of Defense (DoD) CMMC Level 2 certification assessments. Operating out of Augusta, GA in close proximity to the Cyber Center of Excellence you will serve as the primary assessment lead and senior subject matter expert across SteelGate’s C3PAO assessment lifecycle and External Service Provider (ESP) advisory initiatives. In this role, you will lead assessment teams, evaluate defense contractor systems against NIST SP 800-171 / 800-171A controls, manage client engagements through the CMMC Assessment Process (CAP), validate evidence sufficiency, and issue defensible, final compliance determinations.

Key Responsibilities

· Lead Level 2 Assessments: Serve as the Lead Assessor for C3PAO certification engagements, directing assessment planning, execution, evidence collection, and final reporting in accordance with 32 CFR Part 170/171 and Cyber AB CAP guidelines.

· Scope Validation: Review and validate Organization Seeking Assessment (OSA) scoping boundaries across CUI Assets, Security Protection Assets (SPAs), Out-of-Scope Assets, and specialized assets.

· Evidence Analysis & Testing: Execute and supervise the Examine, Interview, and Test assessment methods mapped to NIST SP 800-171A requirements.

· Defensible Reporting: Document findings, generate Assessment Findings Reports, verify artifact hash lists, and oversee submissions into CMMC eMASS.

· Team Management & Quality Assurance: Supervise team CCAs and CCPs, resolve technical discrepancies during evaluations, and ensure independence and strict adherence to ethics and conflict-of-interest standards.

· Collaborate with SteelGate engineering and compliance leadership to ensure SteelGate’s ESP hosting environment maintains alignment with Level 2 security baseline requirements.

· Maintain complete independence between advisory/consulting engagements and formal C3PAO certification audits.

Required Qualifications

· Active Lead CMMC Certified Assessor (LCCA™) credential in good standing with The Cyber AB / CAICO or active CCA™ credential meeting all LCCA criteria.

· Active DoD 8140.03 / 8570.01-M Baseline Certification Advanced Proficiency Level for Work Role 612 (Security Control Assessor) e.g., CISSP, CISM, CISA, GSLC, or GSNA.

· Minimum 5+ years of progressive cybersecurity experience.

· Minimum 3+ years directly conducting IT/cybersecurity audits or control evaluations (NIST SP 800-53, NIST SP 800-171, FedRAMP, ISO 27001, or SOC 2).

· Minimum 5+ years in a technical leadership, management, or audit lead role.

· U.S. Citizenship (Mandatory per CMMC C3PAO program guidelines).

· Active DoD Secret Clearance (or favorable Tier 3 / NAC background investigation determination).

Preferred Qualifications

· Hands-on experience working with Defense Industrial Base (DIB) contractors handling CUI/FCI data.

· Background in federal government contracting, DFARS 252.204-7012 / 7019 / 7020 compliance, and SPRS score submissions.

· Experience with cloud security architectures (AWS GovCloud, Microsoft 365 GCC High) and enclave/ESP boundaries.

· Prior military or DoD civilian experience in Cyber Operations or Information Assurance (e.g., USCC, NETCOM, CCoE).

Travel Requirements

· Primary: Georgia Cyber Center, Augusta, GA. Hybrid scheduling available for non-assessment delivery periods.

· Travel: Up to 25%–35% regional travel for on-site client assessments and site reviews.

Pay: $150,000.00 - $170,000.00 per year

Benefits:

401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Vision insurance

Experience:

Conducting Cybersecurity Audits or control evaluation: 3 years (Preferred)
Cybersecurity: 5 years (Preferred)
CMMC: 3 years (Preferred)
Azure Cloud platform: 1 year (Preferred)

License/Certification:

LCCA (Required)

Security clearance:

Secret (Required)

Work Location: Hybrid remote in Augusta, GA 30901

Steelgate LLC

Latest Jobs

CMMC Lead Assessor