[Hiring] Practice Lead, Privilege Access Management @GuidePoint Security

Role Description

We are looking for a skilled Practice Lead, Privilege Access Management (PAM) to lead GuidePoint Security's central Privileged Access Management practice — a dedicated team of architects and consultants delivering presales and post-sales services to internal sellers across all regions. This role will engage in the development of PAM implementation delivery, long-term managed services, and the technical growth and enablement of the practice while providing "Wow Them" service to clients and/or internal customers or co-workers.

The Practice Lead, PAM will be required to demonstrate strong technical leadership, solution architecture, and delivery management skills, lead by influence, and strong business/financial acumen to drive the use of progressive PAM delivery and managed services programs that will align the delivery business objectives and priorities.

Roles and Responsibilities

• Own the overall Privileged Access Management (PAM) practice strategy, vision, roadmap, and growth, covering CyberArk, Delinea, BeyondTrust, and other modern PAM and privileged identity technologies.
• Define and maintain the practice’s service offerings, delivery methodologies, reference architectures, standards, and best practices.
• Provide strategic and technical leadership across PAM engagements, including strategy, assessment, architecture, implementation, migration, transformation, and managed services.
• Lead the evaluation, design, and implementation of PAM solutions based on client requirements, security objectives, technology landscape, and business needs.
• Provide subject matter expertise across leading PAM platforms, including CyberArk, Delinea, BeyondTrust, and emerging privileged identity and secrets management technologies.
• Develop technology-agnostic PAM architectures and solution recommendations, selecting the appropriate platform based on use cases, scalability, integration requirements, security controls, and total cost of ownership.
• Establish and mature PAM capabilities across people, process, and technology, including governance, operating models, controls, service management, and continuous improvement.
• Lead PAM maturity assessments and develop target-state architectures, transformation roadmaps, and implementation plans.
• Oversee complex PAM implementations and migrations, including on-premises, cloud, hybrid, and SaaS-based PAM environments.
• Drive adoption of modern PAM capabilities such as Just-in-Time (JIT) access, Zero Standing Privileges (ZSP), Zero Trust, machine identities, secrets management, application identities, DevOps integration, and cloud privileged access.
• Develop and maintain PAM reference architectures, reusable accelerators, implementation frameworks, and delivery standards across the practice.
• Provide technical governance and oversight for large-scale PAM programs and ensure solutions meet security, architecture, compliance, and operational requirements.
• Partner with IAM, Cybersecurity, Cloud, Infrastructure, Application, DevOps, Network, Risk, Compliance, and Audit teams to integrate PAM into the broader identity and security ecosystem.
• Lead technical teams consisting of PAM architects, consultants, engineers, and analysts; provide coaching, mentoring, and career development.
• Support pre-sales, solutioning, proposals, RFP/RFI responses, SOW development, effort estimation, and client presentations.
• Build and maintain strong relationships with PAM technology vendors and strategic partners, including CyberArk, Delinea, and BeyondTrust.
• Monitor the PAM technology landscape and evaluate emerging technologies, market trends, and new capabilities to continuously evolve the practice.
• Define and track practice KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction.
• Establish quality assurance and governance processes to ensure consistent delivery across PAM engagements.
• Act as a senior trusted advisor to clients and internal stakeholders on privileged identity security and PAM transformation.

Qualifications

• 12+ years of experience in cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), or related security disciplines.
• 7+ years of experience in PAM, with demonstrated expertise across multiple enterprise PAM platforms.
• Strong hands-on and architectural experience with one or more leading PAM platforms, including CyberArk, Delinea, BeyondTrust, and other modern PAM, privileged identity, secrets management, or identity security platforms.
• Demonstrated experience designing and implementing enterprise PAM architectures and operating models.
• Experience leading large-scale PAM transformation, implementation, migration, and modernization programs.
• Strong understanding of PAM capabilities, including privileged account discovery and onboarding, credential management and rotation, privileged session management and monitoring, Just-in-Time (JIT) and Just-Enough-Access (JEA), Zero Standing Privileges, service and application accounts, secrets management, application and machine identities, SSH key and certificate management, cloud privileged access, and DevOps and CI/CD integration.
• Strong understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management.
• Experience integrating PAM platforms with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains.
• Strong understanding of security frameworks and regulatory requirements, including NIST, CIS, ISO 27001, and applicable industry regulations.
• Proven experience leading technical teams and multidisciplinary security programs.
• Demonstrated ability to communicate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders.
• Strong consulting, problem-solving, stakeholder management, and executive presentation skills.
• Experience developing PAM strategies, roadmaps, reference architectures, SOWs, proposals, estimates, and business cases.
• Ability to balance technical depth, business requirements, risk, cost, and operational considerations when making technology decisions.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education

• Professional certifications in PAM/IAM or cybersecurity, such as CyberArk Defender/Sentry/Trustee, CISSP, CISM, CCSP, or equivalent.
• Certifications or advanced training in Delinea and/or BeyondTrust technologies.
• Experience with CyberArk Conjur, Delinea Secret Server/DevOps Secrets Vault, BeyondTrust Password Safe, or comparable secrets-management capabilities.
• Experience with AWS, Azure, and/or GCP privileged access and identity security.
• Strong experience with PAM automation and APIs, including REST APIs, PowerShell, Python, Terraform, or similar technologies.
• Experience developing PAM managed services or operational support models.
• Experience building or growing a PAM professional services/consulting practice.
• Proven pre-sales and business development experience, including client workshops, RFP responses, proposals, and solution presentations.
• Experience establishing strategic relationships with PAM technology vendors and alliance partners.
• Knowledge of emerging areas such as Identity Threat Detection and Response (ITDR), machine identity security, non-human identities (NHI), AI-driven identity security, and cloud-native privileged access.

Soft Skills

• Excellent communication and presentation skills.
• Strong problem-solving and analytical abilities.
• Customer-focused mindset with consulting approach.
• Ability to explain complex technical concepts to non-technical audiences.
• Project management and organizational skills.
• Ability to work independently and manage multiple priorities.

Travel Requirements

• Up to 25% travel.

Physical Requirements

• Sedentary work.
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day.
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions).
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans).
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.