Secure Configuration Management (SCM) Subject-Matter Expert/Technical Lead

KellyMitchell Group; Bethesda (MD); On-site; USD 131,000 - 172,000; Full time

Benefits offered by this job

Medical, Dental, & Vision Insurance

Employee-Owned Profit Sharing (ESOP)

401K offered

Job summary

KellyMitchell Group's client in Bethesda, MD seeks a Secure Configuration Management (SCM) Subject-Matter Expert / Technical Lead to join their team. You will develop, implement, and maintain secure baselines for Windows, Linux, macOS, and cloud platforms, including Microsoft 365 and AWS/GCP/Azure.

Lead technical guidance, collaborate across security and IT operations, produce high-quality documentation, and mentor teams on secure configuration practices to ensure enterprise-wide consistency.

Qualifications

• Advanced knowledge of enterprise configuration standards and compliance frameworks.
• Experience developing and implementing secure baselines for multiple OS and apps.
• Proficiency with GPO management and MDM tooling; ability to track deviations.
• Experience with Tenable.SC, Nessus, SCAP for compliance validation.
• Strong technical writing for risk assessments, SOPs, and executive briefings.

Responsibilities

• Develop, implement, and maintain secure configuration baselines for OSes and cloud environments.
• Assess regulations and policies to create secure configuration standards.
• Create and manage baseline deviation tracking and policy controls.
• Configure GPOs, MDM tools, and automation to enforce security standards.
• Lead cross-team forums and provide guidance on secure configurations.
• Produce documentation including SOPs, risk assessments, and executive summaries.
• Mentor technical teams on best practices and compliance.
• Ensure baselines align with mission and business needs.

Skills

Enterprise baselines

NIST SP 800-53

CIS Benchmarks

GPO management

MDM tools

Tenable.SC

Nessus

SCAP

Technical writing

Leadership

Tools

Tenable.SC

Nessus

SCAP

GPO mgmt

Job description

Job Summary

Our client is seeking a Secure Configuration Management (SCM) Subject-Matter Expert / Technical Lead to join their team! This position is located in Bethesda, Maryland.

Duties

• Develop, implement, and maintain agency-specific secure configuration baselines for operating systems: Windows, Linux, macOS, enterprise services, applications, and platforms including Microsoft 365 and cloud environments: AWS, GCP, Azure
• Assess and interpret federal regulations, compulsory directives, and agency policies to create secure configuration standards
• Create and manage technical control sets, such as baseline compliance scanning policies, and track deviations from established baselines
• Configure and manage Group Policy Objects (GPOs), Mobile Device Management (MDM) tools, and automation solutions to enforce security standards
• Utilize enterprise scanning tools to validate compliance and identify remediation opportunities
• Serve as technical lead, providing guidance to stakeholders on secure configuration implementation and ensuring enterprise-wide consistency
• Lead collaboration forums and working groups across broad stakeholder groups, including cybersecurity and IT operations communities
• Produce high-quality technical documentation, including SOPs, risk assessments, business justifications, executive summaries, and program guidance
• Ensure alignment of configuration baselines with mission and business requirements
• Mentor and advise technical teams on secure configuration best practices and compliance standards

Desired Skills/Experience

• Demonstrated advanced knowledge of enterprise configuration standards and compliance frameworks, including CIS Benchmarks, NIST SP 800-53 rev 5, NIST Baseline Checklist Repository, and CISA BOD 25-01 SCuBA Secure Configuration Baselines
• Hands-on experience developing and implementing secure baselines for multiple operating systems and enterprise applications
• Proficiency in GPO management, MDM tools, configuration automation, and baseline deviation tracking
• Experience with enterprise scanning tools for compliance validation: Tenable.SC, Nessus, SCAP
• Strong technical writing skills for business justifications, risk assessments, SOPs, workflows, and executive briefings
• Demonstrated ability to lead collaborative forums and working groups across broad stakeholder communities
• Proven experience guiding stakeholders in secure configuration implementation and ensuring enterprise-wide consistency
• Strong problem-solving and analytical skills for assessing configuration gaps and recommending effective remediation
• Excellent verbal and written communication skills, with the ability to convey complex security concepts to technical and executive audiences

Benefits

• Medical, Dental, & Vision Insurance Plans
• Employee-Owned Profit Sharing (ESOP) 401K offered

The approximate pay range for this position is between $95.00 and $125.00. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.

At KellyMitchell, our culture is world class. We're movers and shakers! We don't mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.