Implementation Specialist, Secureframe

• The right person is not only comfortable delivering customer implementations; they want to help define what excellent CMMC implementation looks like at Secureframe
• This role requires strong project leadership, technical fluency, customer empathy, and comfort operating in ambiguity. CMMC customers often need more than software onboarding: they need help understanding scope, CUI and FCI handling, SSP and POA&M workflows, asset categorization, evidence expectations, secure environment decisions, partner responsibilities, and C3PAO readiness
• You will not be expected to personally perform every technical remediation, but you must be able to understand the work, drive accountability, and help the customer make steady progress
• You have 2-5 years of experience in implementation, professional services, customer success, project management, technical consulting, GRC, security compliance, or a similar customer-facing delivery role
• You are a builder. You enjoy creating structure where it does not yet exist, documenting what works, improving rough processes, and helping a new team scale beyond heroic one-off delivery
• You are comfortable with ambiguity and early-stage operating environments. You can make progress with incomplete information, identify the next best step, and keep customers moving without waiting for every answer to be perfect
• You have strong project-management instincts and can manage timelines, dependencies, risks, executive visibility, and cross-functional accountability
• You are technically fluent enough to discuss identity, endpoints, cloud environments, logging, access control, asset inventory, network boundaries, and secure collaboration with IT and security stakeholders
• You understand, or are motivated to quickly learn, CMMC, NIST SP 800-171, CUI, FCI, SSPs, POA&Ms, evidence management, audit readiness, and the defense industrial base
• You can work with a wide range of customers, from founder-led teams with minimal IT capacity to larger organizations managing multiple departments, frameworks, facilities, and stakeholders
• You are customer-centered and pragmatic. You can explain complex compliance and technical concepts in plain language and help customers make decisions that fit their business, risk, and timeline
• You communicate clearly in writing and live meetings, including project plans, status updates, executive summaries, implementation risks, and internal feedback
• You are resourceful with modern tools, including AI, and interested in building smarter workflows for implementation delivery

Desirable

• The Implementation team sits within Secureframe's customer organization and works closely with Sales, Customer Success, Product, Engineering, Security, Support, and our partner ecosystem
• This team is responsible for helping customers move from signed contract to real operational readiness: scoped environments, configured platform workflows, clear control ownership, evidence collection, remediation tracking, and a credible path to CMMC assessment
• This is an early role on a team we are building from scratch
• You will create playbooks, improve handoffs, identify repeatable delivery patterns, pressure-test service packaging, and help turn early customer engagements into a scalable implementation motion
• As an Implementation Specialist focused on CMMC, you will lead hands-on implementation projects for customers pursuing CMMC and, where applicable, more advanced defense readiness requirements
• You will serve as the primary customer-facing owner for implementation execution, coordinating across internal teams, external partners, and customer stakeholders
• Lead end-to-end CMMC implementations for new and existing Secureframe customers, owning the customer experience from kickoff through handoff and readiness milestones
• Translate customer requirements into clear implementation plans, including scope, timeline, milestones, owners, risks, dependencies, and success criteria
• Help customers understand and operationalize CMMC requirements, including Level 1 FCI basics, Level 2 CUI handling, NIST SP 800-171 control expectations, SSP and POA&M workflows, evidence collection, asset inventory, and audit-readiness preparation
• Partner with customers to identify where CUI lives today across email, file sharing, cloud applications, endpoints, engineering systems, specialized equipment, facilities, and third-party providers
• Coordinate implementation work across Secureframe product configuration, control mapping, evidence automation, policies, procedures, owner assignments, remediation tracking, and readiness reporting
• Support secure-environment planning discussions, including identity, endpoint management, logging, network segmentation, GCC High or Azure Government considerations, Google Workspace hardening, virtual desktops, physical controls, and partner-led remediation where relevant
• Work with Sales and Customer Success to improve pre-sale scoping, implementation estimates, customer expectation-setting, and handoff quality
• Collaborate with CMMC partners, MSPs, consultants, auditors, and C3PAOs while maintaining clear boundaries around Secureframe's role in preparation, platform tooling, implementation support, and independent assessment
• Deliver live customer training and working sessions that help customers assign owners, collect evidence, remediate gaps, and use Secureframe as their operating system for CMMC readiness
• Build repeatable implementation assets, including kickoff templates, project plans, RACI models, discovery questionnaires, evidence checklists, status reports, readiness criteria, risk registers, and handoff runbooks
• Identify patterns across implementations and feed those insights back to Product, Engineering, Sales, Customer Success, and leadership
• Use AI and automation thoughtfully to accelerate repeatable implementation work, summarize customer context, surface risks, and improve time to value
• What Success Looks Like
• Customers know exactly what they need to do, who owns each workstream, and how Secureframe supports their path to readiness
• Implementations move from broad CMMC ambition to concrete operating rhythm: scoped assets, assigned controls, evidence owners, remediation plans, reporting, and handoff
• Secureframe develops a repeatable CMMC implementation motion that can serve very small businesses, SMBs, mid-market companies, and more complex defense contractors without reinventing the process every time
• Sales and Customer Success have sharper implementation packaging, better scoping inputs, and more confidence setting customer expectations
• Product and Engineering receive clear feedback on what CMMC customers actually need to deploy, prove, and maintain readiness