IT Manager

Job Title: CMMC Manager

Job Description

The CMMC Manager oversees daily IT operations and leads the organization’s efforts to maintain secure, compliant, and reliable technology environments. This role combines hands-on technical support with strategic leadership, ensuring that IT services, infrastructure, and cybersecurity controls effectively support business needs and compliance requirements, including CMMC Level 2 and NIST 800-171. The CMMC Manager partners closely with internal teams and external providers to drive continuous improvement, manage risk, and deliver a high-quality end-user experience.

Responsibilities

• Manage daily IT operations, including help desk performance, ticket prioritization, escalations, service levels, and timely resolution of incidents and requests.
• Own technical issues from identification through closure, ensuring appropriate follow-up, clear communication, and thorough documentation.
• Provide hands-on Tier 2 and Tier 3 technical support, troubleshooting complex or recurring technology issues, identifying root causes, and implementing sustainable solutions.
• Lead, coach, and develop internal IT team members, providing guidance, feedback, and support to build a high-performing team.
• Coordinate effectively with external IT and cybersecurity partners to ensure aligned priorities, timely execution, and consistent service quality.
• Manage Microsoft 365, cloud applications, endpoints, networks, infrastructure, and other corporate technology platforms to ensure stability, security, and performance.
• Identify gaps in IT operations, systems, processes, documentation, and controls, and develop scalable solutions to address them.
• Drive operational and process improvements from planning through completion, ensuring adoption, documentation, and continuous refinement.
• Lead technology projects, implementations, integrations, hardware refreshes, and other IT initiatives, establishing clear priorities, ownership, timelines, and follow-through.
• Support and maintain CMMC Level 2 and NIST 800-171 compliance and certification readiness, including implementation and maintenance of technical controls and related documentation.
• Coordinate remediation activities with cybersecurity partners and internal stakeholders to address audit findings, vulnerabilities, and control deficiencies.
• Monitor cybersecurity risks in collaboration with the managed security service provider and other partners, and address vulnerabilities, incidents, and corrective actions in a timely manner.
• Manage IT assets and software licensing, ensuring accurate inventory, compliance, and lifecycle planning.
• Oversee vendor relationships, contracts, and renewals, ensuring services and solutions align with business needs and budget constraints.
• Manage technology budgets, balancing cost-effectiveness with reliability, security, and scalability.
• Partner with business and operational teams to understand their needs, bridge technology gaps, and implement practical solutions that improve the end-user experience.
• Anticipate future technology, infrastructure, and support needs, identifying risks and recurring issues and developing actionable plans to address them.
• Support remote and hybrid personnel by ensuring robust, secure, and user-friendly access to cloud-based tools and resources.

Essential Skills

• Minimum of 10 years of relevant technical IT experience.
• 3–5 years of experience leading and managing an IT team.
• Prior experience working in a cloud-first workplace productivity environment for a mid-sized company (approximately 150 to 300+ users).
• Experience supporting remote and hybrid personnel in a cloud-first environment.
• Prior experience supporting NIST 800-171 and CMMC Level 2 compliance and certification readiness.
• Strong problem-solving and critical-thinking skills, with the ability to analyze complex issues, identify root causes, and implement practical solutions.
• Proven ability to identify operational gaps, establish processes, and drive initiatives from planning through implementation and follow-through.
• Strong attention to detail with the ability to think strategically, prioritize effectively, and plan for longer-term technology needs.
• Excellent interpersonal and communication skills, with a proactive, solutions-oriented approach.
• Demonstrated record of ownership, accountability, dependability, and follow-through.
• Hands-on experience managing Microsoft 365 environments.
• Experience managing endpoints, networks, infrastructure, and corporate technology platforms.
• Experience coordinating with external IT and cybersecurity partners.
• Experience providing Tier 2 and Tier 3 technical support and troubleshooting complex issues.

Additional Skills & Qualifications

• Prior experience working with a federal government contractor in a Microsoft 365 GCC or GCC High environment.
• Prior experience supporting NIST 800-171 and CMMC Level 2 compliance and certification readiness in a regulated or government contracting context.
• Experience working with Microsoft Intune for endpoint management.
• Experience working with Microsoft Entra for identity and access management.
• Experience creating standard operating procedures and developing runbooks in an IT service management (ITSM) platform.
• ITIL certification and/or experience implementing and executing ITIL-based practices and processes.
• Cybersecurity experience, including identifying and responding to potential security issues, vulnerabilities, phishing attempts, and suspicious activity.
• Experience leading technology projects, implementations, integrations, and hardware refreshes.
• Experience managing IT assets, software licensing, vendor relationships, and technology budgets.

Work Environment

The CMMC Manager works in a modern, cloud-first technology environment centered on Microsoft 365 and related cloud applications. The role involves managing and supporting endpoints, networks, and infrastructure for a mid-sized user base, including remote and hybrid personnel. You will collaborate closely with internal business teams, an internal IT staff, and external IT and cybersecurity partners, including a managed security service provider. The environment emphasizes structured processes, documentation, and continuous improvement, with a strong focus on cybersecurity, compliance with CMMC Level 2 and NIST 800-171, and reliable service delivery. Work typically involves a combination of project-based initiatives and day-to-day operational support, requiring effective prioritization, clear communication, and a high level of ownership.

Job Type & Location

This is a Permanent position based out of McLean, VA.

Pay and Benefits

The pay range for this position is $150000.00 - $180000.00/yr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Medical insurance Dental & vision HSA/FSA options 401(k) Life insurance Short- and long-term disability Paid parental leave Paid vacation/PTO Paid holidays Bereavement leave Tuition assistance/reimbursement Professional development & conferences Employee Assistance Program (EAP) Wellness programs Company-sponsored events/outings Customized career-development tracks

Workplace Type

This is a hybrid position in McLean,VA.

Application Deadline

This position is anticipated to close on Sep 25, 2026.

About Aston Carter

Aston Carter provides world-class corporate talent solutions to thousands of clients across the globe. Specialized in accounting, finance, human resources, talent acquisition, procurement, supply chain and select administrative professions, we extend the capabilities of industry-leading companies. We draw on our deep recruiting expertise and expansive network to meet the evolving needs of our clients and talent community with agility and excellence. With offices across the U.S., Canada, Asia Pacific and Europe, Aston Carter serves many of the Fortune 500. We are proud to be a ClearlyRated Best of Staffing® Platinum Award winner for both client and talent service.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email astoncarteraccommodation@astoncarter.com for other accommodation options.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.