About SHR Consulting Group
SHR Consulting Group, LLC is a small business delivering enterprise IT, cybersecurity, and program management services to the Department of Defense and federal civilian agencies. We support mission-critical infrastructure at the Pentagon and across the National Capital Region, and we invest in our people through competitive compensation, professional certification support, and long-term career growth on stable, multi-year programs.
Position Summary
We are seeking a Senior Security Platform Engineer is responsible for designing, implementing, and maintaining robust security systems to protect the organization's IT infrastructure. This role requires advanced knowledge of cybersecurity principles, practices, and technologies, as well as hands-on experience with a variety of security tools and platforms. The Security Engineer will work to safeguard the network and data from potential threats and vulnerabilities.This is requirest a DHS Public Trust/EOD. Work location is remote but candidates local to the DC Metro Area is highly preferred.
Key Responsibilities- Design, deploy, configure, upgrade, and maintain enterprise vulnerability, patch management, endpoint management, and privileged access platforms.
- Engineer asset discovery and platform coverage across servers, endpoints, and cloud workloads; resolve unmanaged assets, failed agents, stale inventories, and credentialed-scan gaps.
- Design and operate patch/remediation workflows covering risk prioritization, test rings, pilot deployments, change windows, deployment success, rollback, and verification.
- Connect vulnerability findings to asset ownership, business criticality, exploit intelligence, ticket workflows, exceptions, and scan-based remediation verification.
- Engineer privileged access controls including account discovery, credential vaulting and rotation, just-in-time/least-privilege access, session auditing, and service identities.
- Diagnose platform outages and deployment failures involving agents, OS services, firewalls, proxies, DNS, TLS certificates, credentials, APIs, and infrastructure dependencies.
- Automate deployment, remediation, compliance checks, health monitoring, and reporting through scripting, APIs, and configuration management.
- Own operational break/fix, upgrades, incident response, root cause analysis, backup/recovery validation, runbooks, and handoff to support teams.
- Seven (7) or more years of relevant IT infrastructure, cybersecurity, endpoint management, or security platform engineering experience.
- Demonstrated design, deployment, integration, and production support of one or more enterprise patch/endpoint, vulnerability management, or privileged access solutions.
- Strong Windows and Linux administration, patch technologies, agent lifecycle management, service troubleshooting, and deployment at scale.
- Practical knowledge of authenticated vulnerability scanning, CVE/CVSS, CISA KEV, exposure-based prioritization, asset inventory, and remediation validation.
- Experience with privileged identities, Active Directory/LDAP, service accounts, credential rotation, session controls, and least-privilege administration.
- Ability to troubleshoot TCP/IP, DNS, TLS/PKI, proxy and firewall paths, REST APIs, and logging/integration failures.
- PowerShell, Python, or Bash scripting; ability to write runbooks, implement automation, and troubleshoot critical production services.
- Experience with Tanium, Qualys, BeyondTrust or comparable tools (Intune/MECM, BigFix, Tenable, Rapid7, CyberArk, Delinea).
- ServiceNow integration, Splunk/SIEM, AWS/Azure cloud workloads, Git, infrastructure automation, and configuration management.
Education & Certifications
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, or equivalent relevant experience.
- CISSP, CISM, or CompTIA CySA+ certification (Preferred).
Security Clearance
- U.S. Citizenship.
- Public Trust and/or DHS EOD. FEMA Public Trust is highly preferred.
Work Environment
- Remote.Candidates residing in the DC Metro Area preferred.
Benefits
- Competitive salary commensurate with experience and clearance level.
- Comprehensive medical, dental, and vision coverage.
- 401(k) with company contribution.
- Paid time off and eleven federal holidays.
- Certification reimbursement and training support.
- Life and disability insurance.
Salary Range 135,000 – 150,000 USD. The salary range represents a general guideline; SHR considers a number of factors when determining the base salary offers such as the scope and responsibilities of the position, and the candidate's experience, education, skills and current market conditions.
SHR Consulting Group, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status
Skills Required
- Seven or more years of relevant IT infrastructure, cybersecurity, endpoint management, or security platform engineering experience
- Experience designing, deploying, integrating, and providing production support for enterprise patch, endpoint, vulnerability management, or privileged access solutions
- Strong Windows and Linux administration, patch technologies, agent lifecycle management, service troubleshooting, and deployment at scale
- Knowledge of authenticated vulnerability scanning, CVE/CVSS, CISA KEV, exposure-based prioritization, asset inventory, and remediation validation
- Experience with privileged identities, Active Directory/LDAP, service accounts, credential rotation, session controls, and least-privilege administration
- Ability to troubleshoot TCP/IP, DNS, TLS/PKI, proxy and firewall paths, REST APIs, and logging or integration failures
- PowerShell, Python, or Bash scripting, including automation, runbook development, and production service troubleshooting
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent relevant experience
- U.S. citizenship
- DHS Public Trust and/or DHS EOD
- Experience with Tanium, Qualys, BeyondTrust, or comparable tools such as Intune, MECM, BigFix, Tenable, Rapid7, CyberArk, or Delinea
- Experience with ServiceNow integration, Splunk/SIEM, AWS/Azure cloud workloads, Git, infrastructure automation, and configuration management
- CISSP, CISM, or CompTIA CySA+ certification
- FEMA Public Trust
What We Do
SHR Consulting Group is an IT solutions consulting firm serving U.S. Department of Defense and civilian government agencies. It helps modernize mission-critical environments through cloud migration and architecture, cybersecurity, systems engineering, networking and data-center modernization, strategic IT management, software development, and data analytics. The company emphasizes tailored solutions, technical collaboration, and secure, scalable infrastructure, drawing on experience supporting government missions and large-scale cloud and data transformations.
