Albuquerque's Defense Landscape
Albuquerque doesn't always make the headlines when people talk about defense hubs — but it should. Sandia National Laboratories employs roughly 14,000 people in Albuquerque alone, and Kirtland Air Force Base hosts some of the most sensitive research programs in the Air Force inventory. Together, they anchor one of the most technically advanced defense ecosystems in the country.
The programs here aren't conventional. Directed energy weapons, nuclear weapons systems engineering, space vehicles, hypersonic systems — these are the kinds of programs that sit at the frontier of US defense capability. And the small companies supporting them handle some of the most sensitive technical data in the DoD enterprise. CMMC isn't just a compliance checkbox in Albuquerque — it's a basic requirement for playing in this space.
Los Alamos National Laboratory, about 90 miles north in Los Alamos, also reaches into the Albuquerque contractor community. Suppliers who work across both Sandia and Los Alamos programs often have the most complex CUI environments in the state.
Kirtland is the anchor. AFRL Directed Energy, Air Force Nuclear Weapons Center, Space Vehicles Directorate, and Phillips Research Site. The contractor community along Gibson and Wyoming serves these mission areas directly.
The Sandia Science and Technology Park adjacent to the Lab hosts dozens of tech companies, spinouts, and defense contractors with close ties to Sandia programs. High CUI density.
Defense IT, engineering services, and program support firms are distributed across the Uptown and Journal Center corridors. Many serve Kirtland and Sandia programs with IT systems, engineering analysis, and professional services.
Growing manufacturing base in Rio Rancho with defense component suppliers, electronics manufacturers, and specialty firms supporting Sandia, Kirtland, and White Sands test programs.
National lab work is among the most sensitive in the defense industrial base. If you're building hardware, writing software, or providing services for Sandia or Kirtland programs, you're in a high-sensitivity CUI environment. CMMC Level 2 is table stakes.
The free 2-minute assessment identifies your level, likely gaps, and estimated cost. Sandia and Kirtland contractors: this is where you start.
Take the Free Readiness Check →Major Defense Employers in Albuquerque
Understanding who the major players are helps you understand where the CMMC compliance pressure is coming from:
- Sandia National Laboratories — Operated by Honeywell Federal Manufacturing & Technologies under DOE/NNSA, with deep DoD ties. Develops nuclear weapons, defense systems, and advanced technologies. Massive supply chain of specialized contractors throughout Albuquerque.
- Kirtland Air Force Base — Hosts AFRL Directed Energy Directorate, Air Force Nuclear Weapons Center, Space Vehicles Directorate, and NNSA Sandia Field Office. One of the most research-intensive installations in the Air Force.
- Honeywell Federal Manufacturing & Technologies — Manages Sandia under a DoE contract. Also operates the Kansas City National Security Campus. Significant local supply chain requirements.
- Northrop Grumman — Major presence in Albuquerque supporting space, missile defense, and electronics programs at Kirtland and for Sandia programs.
- Boeing — Space and defense programs with Albuquerque presence, particularly related to Kirtland-based research programs.
- Raytheon / RTX — Missile systems and defense electronics with New Mexico program ties.
- L3Harris — Defense electronics and communications systems supporting regional programs.
The National Lab Challenge
National lab adjacent work creates unique CMMC scoping challenges that most consultants don't encounter in conventional DoD contracting. Here's what makes Albuquerque different:
Dual-use sensitivity. Some information at national labs straddles the line between CUI and classified. CUI requires CMMC; classified information has separate handling requirements. If you're not sure which category applies to your data, you need to sort this out first — before you scope your CMMC environment. Getting this wrong in either direction creates problems.
Multi-agency complexity. Sandia's work spans DoE, DoD, and NNSA. The contracting vehicles and security requirements can differ depending on which agency's work you're doing. A CMMC consultant familiar with the national lab environment understands these distinctions. One who doesn't may scope your environment incorrectly.
Higher average sensitivity. Even routine CUI in the national lab ecosystem tends to be at the higher end of sensitivity — meaning Level 2 is the floor, and Level 3 may apply to some work. Understanding where you sit on that spectrum requires program-specific knowledge.
Not all compliance packages account for the Sandia/Kirtland environment. Ours do. Built from your actual environment and verified by practitioners who can scope it correctly the first time.
Take the Free Readiness Check →New Mexico Resources for CMMC
New Mexico's procurement assistance network, with advisors in Albuquerque familiar with the Sandia and Kirtland contractor community. Provides free initial CMMC guidance, contracting basics, and connections to regional consultants. Your first call before engaging a private practitioner.
Federally funded resource supporting New Mexico manufacturers with CMMC gap assessments, cybersecurity training, and connections to vetted consultants. Particularly useful for defense manufacturers in the Albuquerque and Rio Rancho area. Subsidized rates make this more accessible than private consulting as a starting point.
The Sandia Science & Technology Park management provides tenants with access to Sandia's supply chain compliance resources. If you're a SSTP tenant or a close Sandia supplier, check with your Sandia contracting representative about compliance guidance and timelines specific to your programs.
What Albuquerque Contractors Should Do Now
National lab and Kirtland contractors often think they have more time than they do. The reality: if your prime has DFARS 252.204-7012 in your contract, CMMC requirements are already in force. Here's what to do:
Review your contracts. Look for DFARS 252.204-7012, DFARS 252.204-7019, and DFARS 252.204-7020. These clauses define your current cybersecurity obligations and preview your CMMC requirements. If you don't see them, ask your contracting officer whether they apply.
Check your SPRS score. Your Supplier Performance Risk System score should reflect your current assessment against NIST 800-171. If you haven't submitted a score, you're technically out of compliance with current DFARS requirements today — before CMMC even applies.
Get a gap assessment. New Mexico MEP can help with a subsidized initial assessment. This tells you where your 110-control gaps are before you engage expensive private consultants.
See our full CMMC cost guide to understand what Level 2 certification runs for a company in your position.
Frequently Asked Questions
Yes, if they handle CUI under a DoD contract or subcontract. Sandia is operated under a DoD contract, and contractors working on programs involving CUI are subject to DFARS and CMMC requirements. National lab adjacent work is often highly sensitive — assume Level 2 applies and confirm with your contracting officer.
Kirtland AFB hosts AFRL Directed Energy Directorate, the Air Force Nuclear Weapons Center, Space Vehicles Directorate, and the NNSA Sandia Field Office. It's one of the most research-intensive installations in the Air Force. Contractors supporting these programs almost certainly handle CUI and need CMMC Level 2 at minimum.
New Mexico APEX Accelerator is a state-funded procurement assistance program that helps small businesses navigate federal contracting requirements including CMMC. APEX advisors can provide free initial guidance on your compliance obligations and connect you with regional CMMC consultants who know the Albuquerque defense market.
The CMMC framework is the same — based on NIST 800-171. But national lab work often involves more sensitive information and a higher likelihood of requiring Level 2. Some work may involve classified information rather than CUI, which has separate rules. A consultant familiar with the national lab environment can help you understand which rules apply.
New Mexico MEP is the state's Manufacturing Extension Partnership center — a federally funded resource helping small manufacturers with CMMC compliance. They offer gap assessments, cybersecurity training, and connections to vetted consultants. Their subsidized programs are significantly more affordable than private consulting as a starting point.
Get Your C3PAO-Ready Documentation — Built for Albuquerque's Defense Ecosystem
Take the free readiness check and get a complete compliance package built from your actual environment and verified by practitioners who understand the Sandia and Kirtland contracting environment.
Take the Free Readiness Check →Free · 2 minutes · No obligation
Or see pricing & packages →