[Hiring] Senior Security Platform Engineer @SHR Consulting Group

Role Description

We are seeking a Senior Security Platform Engineer who is responsible for designing, implementing, and maintaining robust security systems to protect the organization's IT infrastructure. This role requires advanced knowledge of cybersecurity principles, practices, and technologies, as well as hands-on experience with a variety of security tools and platforms. The Security Engineer will work to safeguard the network and data from potential threats and vulnerabilities. This position requires a DHS Public Trust/EOD. Work location is remote but candidates local to the DC Metro Area are highly preferred.

Key Responsibilities

• Design, deploy, configure, upgrade, and maintain enterprise vulnerability, patch management, endpoint management, and privileged access platforms.
• Engineer asset discovery and platform coverage across servers, endpoints, and cloud workloads; resolve unmanaged assets, failed agents, stale inventories, and credentialed-scan gaps.
• Design and operate patch/remediation workflows covering risk prioritization, test rings, pilot deployments, change windows, deployment success, rollback, and verification.
• Connect vulnerability findings to asset ownership, business criticality, exploit intelligence, ticket workflows, exceptions, and scan-based remediation verification.
• Engineer privileged access controls including account discovery, credential vaulting and rotation, just-in-time/least-privilege access, session auditing, and service identities.
• Diagnose platform outages and deployment failures involving agents, OS services, firewalls, proxies, DNS, TLS certificates, credentials, APIs, and infrastructure dependencies.
• Automate deployment, remediation, compliance checks, health monitoring, and reporting through scripting, APIs, and configuration management.
• Own operational break/fix, upgrades, incident response, root cause analysis, backup/recovery validation, runbooks, and handoff to support teams.

Qualifications

• Seven (7) or more years of relevant IT infrastructure, cybersecurity, endpoint management, or security platform engineering experience.
• Demonstrated design, deployment, integration, and production support of one or more enterprise patch/endpoint, vulnerability management, or privileged access solutions.
• Strong Windows and Linux administration, patch technologies, agent lifecycle management, service troubleshooting, and deployment at scale.
• Practical knowledge of authenticated vulnerability scanning, CVE/CVSS, CISA KEV, exposure-based prioritization, asset inventory, and remediation validation.
• Experience with privileged identities, Active Directory/LDAP, service accounts, credential rotation, session controls, and least-privilege administration.
• Ability to troubleshoot TCP/IP, DNS, TLS/PKI, proxy and firewall paths, REST APIs, and logging/integration failures.
• PowerShell, Python, or Bash scripting; ability to write runbooks, implement automation, and troubleshoot critical production services.

Preferred Experience

• Experience with Tanium, Qualys, BeyondTrust or comparable tools (Intune/MECM, BigFix, Tenable, Rapid7, CyberArk, Delinea).
• ServiceNow integration, Splunk/SIEM, AWS/Azure cloud workloads, Git, infrastructure automation, and configuration management.

Education & Certifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, or equivalent relevant experience.
• CISSP, CISM, or CompTIA CySA+ certification (Preferred).

Security Clearance

• U.S. Citizenship.
• Public Trust and/or DHS EOD. FEMA Public Trust is highly preferred.

Work Environment

• Remote. Candidates residing in the DC Metro Area preferred.

Benefits

• Competitive salary commensurate with experience and clearance level.
• Comprehensive medical, dental, and vision coverage.
• 401(k) with company contribution.
• Paid time off and eleven federal holidays.
• Certification reimbursement and training support.
• Life and disability insurance.
• Salary Range 135,000 – 150,000 USD. The salary range represents a general guideline; SHR considers a number of factors when determining the base salary offers such as the scope and responsibilities of the position, and the candidate's experience, education, skills and current market conditions.

SHR Consulting Group, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.