Matthew Johnson

About Matthew Johnson

As a Compliance Engineer at CyberSheath, Matthew helps organizations within the Defense Industrial Base (DIB) secure their environments and navigate the complex requirements of cybersecurity compliance. His work focuses on implementing and managing technical security controls aligned with CMMC, NIST 800-171, and DFARS requirements. Through CyberSheath’s AIM methodology, Assess, Implement, Manage, he helps clients secure Microsoft-centric environments, including Azure, Azure Virtual Desktop, Microsoft 365, Intune, and Defender for Endpoint.Matthew’s day-to-day responsibilities include configuring secure baselines, enforcing conditional access policies, managing SIEM and XDR integrations, and gathering compliance artifacts such as access logs and system configurations. He works closely with clients and internal teams to ensure audit readiness and communicates complex technical concepts clearly to both technical and non-technical stakeholders.Prior to joining CyberSheath, Matthew spent over nine years at BHG Financial, where he served as a Cloud Staff Engineer specializing in High Availability and Disaster Recovery Architecture. While at BHG, he led several major infrastructure projects, including the seamless migration of over 500 virtual machines to a hybrid cloud environment. He also upgraded the company’s primary application platform that communicated with TransUnion and Equifax, transitioning from legacy VPN protocols to API-based communication and implementing a fully redundant HA pair platform to improve uptime and security.Matthew has designed and deployed disaster recovery solutions using Cohesity, Dell PowerProtect, and Zerto, and enhanced endpoint protection using CrowdStrike and Tanium. He also has deep experience with VMware, Windows Server, Cisco, Palo Alto Networks, and automation through PowerShell and Python.With a passion for practical, scalable solutions, Matthew combines technical expertise with a hands-on approach to help organizations improve their security posture, meet compliance goals, and strengthen operational resilience.

Experience

1. Cloud Compliance Engineer - Azure Cmmc

   CyberSheath

   Apr 2025 — Present · Reston, VA, US

   Supports cybersecurity and compliance efforts for clients in the Defense Industrial Base (DIB), helping organizations achieve and sustain Cybersecurity Maturity Model Certification (CMMC) compliance. Contributes across all phases of CyberSheath’s AIM methodology, Assess, Implement, Manage, by evaluating existing environments, implementing secure technical controls, and managing long-term compliance operations.Leads the configuration and management of Microsoft-focused security tools and platforms, including Azure, Azure Virtual Desktop, Microsoft 365, Intune, Defender for Endpoint, Group Policy and more. Establishes and maintains secure baselines, conditional access policies, identity and access management, and monitoring through SIEM and XDR platforms. Ensures compliance through the collection and documentation of artifacts such as system configurations, access logs, and security event data.Collaborates directly with clients and auditors to support audit readiness, provide expert guidance on CMMC-related requirements, and translate complex technical implementations into clear, actionable information. Acts as a trusted technical advisor by aligning compliance initiatives with practical, business-focused outcomes.Works closely with internal compliance, infrastructure, and security teams to remediate vulnerabilities, refine technical controls, and continuously improve security posture. Maintains a proactive, solution-driven approach that balances regulatory demands with effective and sustainable IT operations.

Education

• Western Governors University

  Bachelor's degree, Computer and Information Sciences and Support Services

  2014 — 2016

• Montana State University Billings

  Bachelor of Applied Science - BASc, Cisco Systems, Networking, and LAN/WAN Management/Manager

  2008 — 2012

• Cisco Networking Academy

  CCNA/CCNP Path, CCNA 1 & 2, CCNP 1, CCDA 1

  2010 — 2012