> Markdown version of [/jobs/ext/1409644-cmmc-oriented-cybersecurity-gap-assessment-consultant-it-focused-1099-hourly](https://www.wearedevelopers.com/jobs/ext/1409644-cmmc-oriented-cybersecurity-gap-assessment-consultant-it-focused-1099-hourly). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CMMC-Oriented Cybersecurity Gap Assessment Consultant - IT-Focused (1099 / Hourly)

- **Company:** Micharona Consulting LLC
- **Location:** United States (Remote available)
- **Salary:** $114,400.0 - $176,800.0
- **Contract:** Contract
- **Skills:** Backup Devices, Cyber Security, Document Management Systems, Data Logging
- **Published:** July 23, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=ea9559a0231aa75b

## About the Role

* Strong IT background (systems, networks, cloud, or MSP operations) with security control exposure.
 * Familiarity with CMMC or NIST 800-171/800-53 concepts and language; direct experience is a plus.
 * Ability to think in terms of "controls in practice," not just policy wording.
 * Comfortable working as a 1099 contractor on scoped assessments and readiness projects.

## Description

Micharona Consulting supports organizations working toward CMMC Levels 1-2 and related NIST 800-171 expectations. This contractor role focuses on IT-centric gap assessments: understanding how controls are implemented in practice and contributing to readiness documentation and recommendations.

What You'll Do

 * Participate in CMMC-lean gap assessments using Micharona's tools and templates.
 * Interview IT staff, MSPs, and leadership to understand control implementations.
 * Review technical artifacts (configs, diagrams, inventories, logging, backup) for alignment with CMMC-level expectations.
 * Help document control status and draft realistic remediation recommendations for SMB/MSP environments.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)