Security Consultant (Identity & SecOps) - Mid-Atlantic region (Remote in NC, VA, MD, DC, DE, PA, or NJ)

At GuidePoint Security, our consultants help customers solve complex security challenges through a combination of strategic guidance, technical depth, and hands-on execution. We are seeking a Senior Security Consultant / Principal – Identity & SecOps to help lead our Mid-Atlantic (Mid-A) Security Consulting practice. This is a senior-level role for an experienced practitioner who can both lead engagements and roll up their sleeves to deliver. The role focuses on Microsoft Entra ID, Active Directory, Identity & Access Management (IAM), PKI, Conditional Access Policy (CAP) assessments, and modern identity security platforms while helping customers navigate emerging challenges around Non-Human Identity (NHI) and AI/agentic identity security. The ideal candidate pairs deep identity and SecOps expertise with strong leadership and customer-facing presence, including the ability to support presales activities and act as a trusted advisor throughout the sales and delivery lifecycle. This consultant will work alongside our existing Identity delivery lead and collaborate across GuidePoint’s broader Security Consulting (SecCon) team, supporting initiatives aligned to the organization.

Responsibilities

Lead and deliver identity-focused engagements from scoping through execution and final deliverables; Assess, design, and improve Microsoft Entra ID / Active Directory environments; Perform Conditional Access Policy (CAP) assessments and identity hardening reviews; Design and advise on PKI, certificate lifecycle, and foundational cryptographic controls; Support Identity governance, MFA, PAM, Conditional Access, PIM, RBAC, and passwordless / FIDO2 initiatives; Advise on and help secure modern identity platforms, including CrowdStrike Falcon Identity Protection / Next-Gen Identity Security (ITDR), Microsoft Entra, Okta, and related solutions; Help customers address Non-Human Identity (NHI) risks (service accounts, workload identities, API keys, secrets) and emerging AI / agentic identity security concerns; Support SecOps initiatives including SIEM, SOC, ITDR, threat hunting, log ingestion, telemetry coverage, and alert tuning; Perform Security Architecture Reviews and technical assessments, and develop actionable remediation roadmaps; Mentor and provide technical leadership to junior consultants and analysts, elevating team capability; Support presales activities (scoping calls, solutioning, statements of work, and technical demonstrations) as a trusted advisor to prospective and existing customers; Produce high-quality customer deliverables and technical documentation; Embrace emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes

Requirements

8+ years of cybersecurity consulting, engineering, or architecture experience, with demonstrated project delivery ownership; Deep, hands-on experience with Microsoft Entra ID / Active Directory and M365 security; Experience implementing or administering IAM controls, PKI, and authentication technologies; Strong command of Conditional Access, MFA, SSO, RBAC, PIM, PAM, and Zero Trust concepts; Experience supporting SecOps functions — SIEM/Sentinel, SOC, ITDR, or threat hunting; Demonstrated leadership skills — leading engagements, mentoring team members, and owning delivery outcomes; Strong customer-facing and presales skills with the ability to lead conversations, present to technical and executive audiences, and act as a trusted advisor; Excellent written and verbal communication skills; Ability to lead and manage multiple customer engagements in parallel; Eastern Time Zone availability required

Nice to have

Experience with the Value-Added Reseller (VAR) / solution provider business model and partner/vendor ecosystem; Experience with enterprise IAM / IGA / PAM platforms such as SailPoint, Saviynt, CyberArk, Delinea, BeyondTrust, Okta, or Ping; Experience with CrowdStrike Falcon Identity Protection / Next-Gen Identity Security, ITDR, or FCS; Familiarity with Non-Human Identity (NHI) governance and AI / agentic identity security approaches; Experience with FIDO2 / passwordless authentication deployments; Familiarity with Microsoft Sentinel, Defender, Purview, or Duo; Azure and/or AWS cloud security experience; Consulting or professional services background strongly preferred; Relevant certifications such as CISSP, CCSP, SC-300, AZ-500, SC-100, or Identity-specific credentials

Benefits

Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions); Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of employee premiums and 75% for family plans; HSA contribution $850 per EE annually / $1750 per family annually); Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans; 12 corporate holidays and a Flexible Time Off (FTO) program; Healthy mobile phone and home internet allowance; Eligibility for retirement plan after 2 months at open enrollment; Pet Benefit Option