The role
Wilkes & Liberty's federal and regulated-client work depends on compliance evidence that is accurate, current, and defensible — not assembled after delivery. You will own control mapping and compliance authoring, distinct from the Security / Architecture Reviewer's technical design review.
What you will own
- The assessed system boundary and shared-responsibility model for each engagement in scope of NIST 800-171 or a comparable federal or regulated framework.
- Mapping of each applicable requirement to implementation evidence, an evidence owner, a review cadence, and any open gap.
- POA&M items carried through to verified closure, not left open indefinitely.
- Compliance narratives and evidence artifacts that hold up under external audit or client review.
- Collaboration with the Security / Architecture Reviewer on applicable obligations, while keeping technical security findings distinct from control narratives or certification claims.
- Early escalation of compliance gaps before they become delivery or contractual risk.
What you bring
- Experience with control mapping or compliance authoring against a federal or regulated framework such as NIST 800-171.
- Ability to produce evidence artifacts that hold up under external audit or client review.
- Comfort working directly with engineering teams to extract compliance-relevant detail.
- Clarity that a reviewed design and documented evidence are not the same as a certified system. This role does not claim certification or legal sufficiency.
Helpful experience
- CMMC, NIST 800-53, FISMA/FedRAMP, SSPs, or assessment-evidence work.
- Regulated third-party review or audit support.
Equal opportunity and accommodations. Wilkes & Liberty considers qualified candidates without regard to protected characteristics. Reasonable accommodations are available during the application process.