About SHR Consulting Group
SHR Consulting Group, LLC is a small business delivering enterprise IT, cybersecurity, and program management services to the Department of Defense and federal civilian agencies. We support mission-critical infrastructure at the Pentagon and across the National Capital Region, and we invest in our people through competitive compensation, professional certification support, and long-term career growth on stable, multi-year programs.
Position Summary
We are seeking a Senior Security Platform Engineer is responsible for designing, implementing, and maintaining robust security systems to protect the organization's IT infrastructure. This role requires advanced knowledge of cybersecurity principles, practices, and technologies, as well as hands-on experience with a variety of security tools and platforms. The Security Engineer will work to safeguard the network and data from potential threats and vulnerabilities.This is requirest a DHS Public Trust/EOD. Work location is remote but candidates local to the DC Metro Area is highly preferred.
Key Responsibilities- Design, deploy, configure, upgrade, and maintain enterprise vulnerability, patch management, endpoint management, and privileged access platforms.
- Engineer asset discovery and platform coverage across servers, endpoints, and cloud workloads; resolve unmanaged assets, failed agents, stale inventories, and credentialed-scan gaps.
- Design and operate patch/remediation workflows covering risk prioritization, test rings, pilot deployments, change windows, deployment success, rollback, and verification.
- Connect vulnerability findings to asset ownership, business criticality, exploit intelligence, ticket workflows, exceptions, and scan-based remediation verification.
- Engineer privileged access controls including account discovery, credential vaulting and rotation, just-in-time/least-privilege access, session auditing, and service identities.
- Diagnose platform outages and deployment failures involving agents, OS services, firewalls, proxies, DNS, TLS certificates, credentials, APIs, and infrastructure dependencies.
- Automate deployment, remediation, compliance checks, health monitoring, and reporting through scripting, APIs, and configuration management.
- Own operational break/fix, upgrades, incident response, root cause analysis, backup/recovery validation, runbooks, and handoff to support teams.
- Seven (7) or more years of relevant IT infrastructure, cybersecurity, endpoint management, or security platform engineering experience.
- Demonstrated design, deployment, integration, and production support of one or more enterprise patch/endpoint, vulnerability management, or privileged access solutions.
- Strong Windows and Linux administration, patch technologies, agent lifecycle management, service troubleshooting, and deployment at scale.
- Practical knowledge of authenticated vulnerability scanning, CVE/CVSS, CISA KEV, exposure-based prioritization, asset inventory, and remediation validation.
- Experience with privileged identities, Active Directory/LDAP, service accounts, credential rotation, session controls, and least-privilege administration.
- Ability to troubleshoot TCP/IP, DNS, TLS/PKI, proxy and firewall paths, REST APIs, and logging/integration failures.
- PowerShell, Python, or Bash scripting; ability to write runbooks, implement automation, and troubleshoot critical production services.
- Experience with Tanium, Qualys, BeyondTrust or comparable tools (Intune/MECM, BigFix, Tenable, Rapid7, CyberArk, Delinea).
- ServiceNow integration, Splunk/SIEM, AWS/Azure cloud workloads, Git, infrastructure automation, and configuration management.
Education & Certifications
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, or equivalent relevant experience.
- CISSP, CISM, or CompTIA CySA+ certification (Preferred).
Security Clearance
- U.S. Citizenship.
- Public Trust and/or DHS EOD. FEMA Public Trust is highly preferred.
Work Environment
- Remote.Candidates residing in the DC Metro Area preferred.
Benefits
- Competitive salary commensurate with experience and clearance level.
- Comprehensive medical, dental, and vision coverage.
- 401(k) with company contribution.
- Paid time off and eleven federal holidays.
- Certification reimbursement and training support.
- Life and disability insurance.
Salary Range 135,000 – 150,000 USD. The salary range represents a general guideline; SHR considers a number of factors when determining the base salary offers such as the scope and responsibilities of the position, and the candidate's experience, education, skills and current market conditions.
SHR Consulting Group, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status
Similar Jobs
What you need to know about the NYC Tech Scene
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
