> Markdown version of [/jobs/ext/2847261-compliance-asset-security-configuration-management-casc-manager](https://www.wearedevelopers.com/jobs/ext/2847261-compliance-asset-security-configuration-management-casc-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Compliance, Asset, Security, & Configuration Management (CASC) Manager - **Company:** Aleut Federal LLC - **Location:** Louisville, CO, United States - **Experience:** Expert - **Salary:** $155,000.0 - $170,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Artificial Intelligence, Confluence, JIRA, Microsoft Azure, Cascading Style Sheets (CSS), Cloud Computing, Cloud Engineering, Configuration Management, CompTIA Security+, Cyber Security, IT Management, Information Security Management System, Information Technology, Servicenow - **Published:** September 11, 2026 - **Apply:** https://www.careerjet.com/job/us06871fd99e0c29c396654d1b12d944a4/eaa ## About the Role * 10 years of related experience and a Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field. * Must be a US Citizen. * Strong technical proficiency across cybersecurity, cloud platforms (Microsoft Azure/M365 preferred), and compliance frameworks. * Working knowledge of CMMC Level 2 / NIST 800-171 requirements and audit/assessment processes. * Experience with IT asset management and lifecycle tracking. * Experience with configuration/change management processes and tooling (e.g., Jira, ServiceNow, or similar). * Highly detail-oriented, organized, and results-focused, with the ability to independently drive initiatives to completion. * Strong written and verbal communication skills, including documentation and audit-facing materials. * Comfortable working a service desk/ticket queue directly and balancing reactive support work with longer-term process ownership., * 15 years of related experience and a Master's degree in Information Technology, Cybersecurity, or related field. * Relevant IT/security certifications (e.g., CISSP, CISM, Security+, CySA+, CMMC-related certifications such as CCP/CCA, ITIL, or similar). * Experience supporting a federal contractor or Alaska Native Corporation (ANC)/8(a) environment. * Experience with dual-tenant Microsoft 365 environments (Commercial + GCC High). * Familiarity with Microsoft Purview, Defender for Cloud, or similar governance/security tooling. ## Description Aleut Federal is seeking a Compliance, Asset, Security, & Configuration Management (CASC) Manager to own and mature the organization's compliance posture, IT asset lifecycle, security configuration standards, and change/configuration management practices. This is a full product-ownership role: the CASC Manager owns these areas end-to-end, from working day-to-day support tickets through to driving continuous improvement and maturity of the underlying processes. This is an individual-contributor role (no direct reports) requiring detailed, results-focused execution in a fully cloud-native, CMMC Level 2-obligated enterprise environment. The ideal candidate is highly organized, technically fluent across cyber, cloud, and compliance domains, and comfortable owning outcomes independently, from triaging a single ticket to redesigning a process., Compliance * Own and maintain the organization's compliance posture against CMMC Level 2, NIST 800-171, and related federal contractor security requirements. * Maintain and continuously improve the System Security Plan (SSP), policies, and control narratives, ensuring evidence and documentation stay audit-ready. * Support C3PAO assessments and any follow-on assessments, coordinating evidence collection and remediation of findings. * Track and manage POA&Ms (Plans of Action & Milestones) through closure. * Monitor regulatory and contractual compliance changes and translate them into actionable internal requirements. Asset Management * Own the IT asset inventory (hardware, software, cloud resources) across commercial and GCC High environments, ensuring accuracy and completeness. * Establish and maintain asset lifecycle processes: procurement, provisioning, tracking, and decommissioning/disposal. * Conduct software inventory triage and licensing reviews to identify unauthorized or high-risk tools and reduce audit risk. * Maintain shredding/disposal standards and documentation in accordance with applicable requirements (e.g., NSA/CSS EPL). Security & Configuration Management * Own baseline security configuration standards across endpoints, servers, and cloud environments, and monitor for drift. * Manage the Change Control Board (CCB) process and associated risk-tiered change management framework. * Partner with the Cloud Architect/Engineer and IT team on configuration hardening, sensitivity labeling, and access control alignment with compliance requirements. * Support security incident response efforts by providing configuration, asset, and compliance context. * Maintain Confluence/KB documentation for CASC processes, optimized for both human use and internal AI/RAG retrieval. Ticket Ownership & Continuous Improvement * Serve as the primary owner for compliance, asset, security configuration, and change management tickets in the IT service desk queue, from intake through resolution. * Triage and resolve day-to-day requests (asset requests, access/configuration questions, compliance inquiries, change requests) within established SLAs. * Use recurring ticket patterns and root-cause analysis to identify opportunities for process improvement, automation, and documentation. * Own the full lifecycle of each CASC function as a "product" - from reactive ticket support up through proactive roadmap and maturity planning. Cross-Functional * Report on compliance, asset, and configuration risk posture to IT leadership on a regular cadence. * Collaborate with Cloud Architecture and Program teams to ensure CASC practices are embedded in ongoing initiatives (e.g., dual-tenant M365 architecture, AI tooling governance). * Drive process discipline and documentation rigor across all CASC areas. ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Crew Management System for Airlines: Plan duties for pilots & flight attendants worldwide](https://www.wearedevelopers.com/videos/1444-crew-management-system-for-airlines-plan-duties-for-pilots-flight-attendants-worldwide) - [42 x 2 Canvases Later: Two Years, Two Minds, Many Lessons](https://www.wearedevelopers.com/videos/1458-42-x-2-canvases-later-two-years-two-minds-many-lessons) - [A Founder's Journey : From Startup Chaos to Purposeful Growth](https://www.wearedevelopers.com/videos/1926-a-founder-s-journey-from-startup-chaos-to-purposeful-growth) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)