Practice Lead, Privilege Access Management (PAM)

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. We are looking for a skilled Practice Lead, Privilege Access Management (PAM) to lead GuidePoint Security's central Privileged Access Management practice, a dedicated team of architects and consultants delivering presales and post-sales services to internal sellers across all regions. This role will engage in the development of PAM implementation delivery, long-term managed services, and the technical growth and enablement of the practice while providing "Wow Them" service to clients and/or internal customers or co-workers.

Responsibilities

Own the overall Privileged Access Management (PAM) practice strategy, vision, roadmap, and growth; Define and maintain the practice's service offerings, delivery methodologies, reference architectures, standards, and best practices; Provide strategic and technical leadership across PAM engagements, including strategy, assessment, architecture, implementation, migration, transformation, and managed services; Lead the evaluation, design, and implementation of PAM solutions based on client requirements, security objectives, technology landscape, and business needs; Provide subject matter expertise across leading PAM platforms; Develop technology-agnostic PAM architectures and solution recommendations; Establish and mature PAM capabilities across people, process, and technology; Lead PAM maturity assessments and develop target-state architectures, transformation roadmaps, and implementation plans; Oversee complex PAM implementations and migrations, including on-premises, cloud, hybrid, and SaaS-based PAM environments; Drive adoption of modern PAM capabilities such as JIT access, Zero Standing Privileges, Zero Trust, machine identities, secrets management, DevOps integration, and cloud privileged access; Develop and maintain PAM reference architectures, reusable accelerators, implementation frameworks, and delivery standards; Provide technical governance and oversight for large-scale PAM programs; Partner with IAM, Cybersecurity, Cloud, Infrastructure, Application, DevOps, Network, Risk, Compliance, and Audit teams; Lead technical teams of PAM architects, consultants, engineers, and analysts, providing coaching, mentoring, and career development; Support pre-sales, solutioning, proposals, RFP/RFI responses, SOW development, effort estimation, and client presentations; Build and maintain relationships with PAM technology vendors and strategic partners, including CyberArk, Delinea, and BeyondTrust; Monitor the PAM technology landscape and evaluate emerging technologies; Define and track practice KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction; Establish quality assurance and governance processes for consistent delivery across PAM engagements; Act as a senior trusted advisor to clients and internal stakeholders on privileged identity security and PAM transformation

Requirements

12+ years of experience in cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), or related security disciplines; 7+ years of experience in PAM with demonstrated expertise across multiple enterprise PAM platforms; Strong hands-on and architectural experience with one or more leading PAM platforms (CyberArk, Delinea, BeyondTrust, or other modern PAM, privileged identity, secrets management, or identity security platforms); Demonstrated experience designing and implementing enterprise PAM architectures and operating models; Experience leading large-scale PAM transformation, implementation, migration, and modernization programs; Strong understanding of PAM capabilities (privileged account discovery and onboarding, credential management and rotation, privileged session management and monitoring, Just-in-Time (JIT) and Just-Enough-Access (JEA), Zero Standing Privileges, service and application accounts, secrets management, application and machine identities, SSH key and certificate management, cloud privileged access, DevOps and CI/CD integration); Strong understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management; Experience integrating PAM platforms with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains; Strong understanding of security frameworks and regulatory requirements, including NIST, CIS, ISO 27001, and applicable industry regulations; Proven experience leading technical teams and multidisciplinary security programs; Demonstrated ability to communicate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders; Strong consulting, problem-solving, stakeholder management, and executive presentation skills; Experience developing PAM strategies, roadmaps, reference architectures, SOWs, proposals, estimates, and business cases; Ability to balance technical depth, business requirements, risk, cost, and operational considerations when making technology decisions; Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes; Excellent communication and presentation skills; Strong problem-solving and analytical abilities; Customer-focused mindset with consulting approach; Ability to explain complex technical concepts to non-technical audiences; Project management and organizational skills; Ability to work independently and manage multiple priorities; Up to 25% travel; Sedentary work with substantial hand/finger movement and close visual acuity for a minimum of 8 hours a day

Nice to have

Professional certifications in PAM/IAM or cybersecurity (CyberArk Defender/Sentry/Trustee, CISSP, CISM, CCSP, or equivalent); Certifications or advanced training in Delinea and/or BeyondTrust technologies; Experience with CyberArk Conjur, Delinea Secret Server/DevOps Secrets Vault, BeyondTrust Password Safe, or comparable secrets-management capabilities; Experience with AWS, Azure, and/or GCP privileged access and identity security; Strong experience with PAM automation and APIs (REST APIs, PowerShell, Python, Terraform, or similar); Experience developing PAM managed services or operational support models; Experience building or growing a PAM professional services/consulting practice; Proven pre-sales and business development experience, including client workshops, RFP responses, proposals, and solution presentations; Experience establishing strategic relationships with PAM technology vendors and alliance partners; Knowledge of emerging areas such as Identity Threat Detection and Response (ITDR), machine identity security, non-human identities (NHI), AI-driven identity security, and cloud-native privileged access

Benefits

Group Medical Insurance options (Zero Deductible PPO Plan with employer premium contribution, or High Deductible Health Plan with HSA and employer contributions); Group Dental Insurance (employer pays 100% of employee premium and 75% of family plans); 12 corporate holidays; Flexible Time Off (FTO) program; Healthy mobile phone and home internet allowance; Eligibility for retirement plan after 2 months at open enrollment; Pet Benefit Option; Remote workforce