Remote opportunity at
GuidePoint SecurityPractice Lead, Privilege Access Management (PAM)
GuidePoint Security is hiring a Practice Lead for its central Privileged Access Management practice. The practice is a team of architects and consultants who deliver presales…
Career Tools
About This Role
GuidePoint Security is hiring a Practice Lead for its central Privileged Access Management practice. The practice is a team of architects and consultants who deliver presales and post-sales PAM services to internal sellers in every region. The role is remote, limited to U.S.-based employees, and involves up to 25 percent travel. The Practice Lead owns the practice's strategy, service offerings, reference architectures and delivery standards. The role oversees large PAM…
Job Description
GuidePoint Security is hiring a Practice Lead for its central Privileged Access Management practice. The practice is a team of architects and consultants who deliver presales and post-sales PAM services to internal sellers in every region. The role is remote, limited to U.S.-based employees, and involves up to 25 percent travel.
The Practice Lead owns the practice's strategy, service offerings, reference architectures and delivery standards. The role oversees large PAM implementations, migrations and managed services spanning on-prem, cloud, hybrid and SaaS deployments. It covers CyberArk, Delinea, BeyondTrust and newer privileged identity and secrets tools, and it drives adoption of just-in-time access, zero standing privileges and machine identity security.
The position also leads a technical team of architects, consultants, engineers and analysts. It supports pre-sales work such as proposals, RFP responses, SOWs and client presentations, and it tracks practice KPIs including utilization, revenue, profit and client satisfaction. The posting asks for 12 or more years in security or identity work, 7 or more years in PAM across several enterprise platforms, and strong executive communication.
The Practice Lead is also expected to serve as a go-to adviser for customers and colleagues on how privileged identity security should evolve.
Responsibilities
- Set the PAM practice's strategy, vision, roadmap and growth across CyberArk, Delinea, BeyondTrust and emerging tools
- Define service offerings, delivery methods, reference architectures and quality standards
- Lead strategy, assessment, architecture, implementation, migration and managed-service engagements
- Evaluate and design PAM solutions, choosing platforms by use case, scale, integration needs and total cost of ownership
- Mature people, process and technology capabilities, including governance, controls and service management
- Run PAM maturity assessments and produce target-state architectures and transformation roadmaps
- Oversee complex PAM programs and confirm they meet security, compliance and operational requirements
- Coordinate with IAM, cybersecurity, cloud, DevOps, risk, compliance and audit teams
- Coach, mentor and develop the technical team
- Support pre-sales work, including solutioning, proposals, SOWs, estimates and client presentations
- Manage relationships with PAM vendors and strategic partners
- Track KPIs such as delivery metrics, utilization, revenue, profitability and satisfaction
Requirements
- 12+ years in cybersecurity, IAM, PAM or a related discipline
- 7+ years in PAM, with depth on several enterprise platforms such as CyberArk, Delinea or BeyondTrust
- Track record designing PAM architectures and operating models for large organizations
- Experience leading large PAM transformation, migration or modernization programs
- Working knowledge of discovery, credential rotation, session monitoring, JIT and JEA, zero standing privileges, service accounts, SSH key and certificate management, and cloud privileged access
- Solid grasp of IAM, zero trust, governance, MFA, RBAC and ABAC, SSO and lifecycle management
- Experience connecting PAM to directories, SIEM, ITSM, MFA, cloud, databases and DevOps chains
- Familiar with NIST, CIS and ISO 27001 frameworks plus sector rules
- Experience leading technical teams across multidisciplinary security programs
- Ability to explain complex technical topics to executives and non-technical audiences
Qualifications
- Professional certifications such as CyberArk Defender, Sentry or Trustee, CISSP, CISM or CCSP
- Delinea or BeyondTrust certifications or advanced training
- Hands-on use of CyberArk Conjur or similar secrets tools, such as Delinea's DevOps Secrets Vault or BeyondTrust Password Safe
- Privileged access experience on AWS, Azure or GCP
- PAM automation using REST APIs, PowerShell, Python or Terraform
- Experience building PAM managed services or a consulting practice
- Pre-sales and business development background, including client workshops and RFP responses
- Awareness of ITDR, machine-identity protection, NHIs, AI-related identity controls and cloud-native PAM
Core Skills
Benefits
- 12 corporate holidays
- Flexible time off program
- Medical coverage with a zero-deductible PPO or an HSA-linked high-deductible plan, with employer-paid premium shares
- Dental coverage with employer-paid premium shares
- Stipend toward mobile phone and home internet costs
- Retirement plan eligibility after two months
- Pet benefit option
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is the role remote?
Yes, the posting describes a remote role limited to U.S.-based employees, with up to 25 percent travel.
What experience is required?
The posting asks for 12+ years in cybersecurity, IAM, PAM or a related field, including 7+ years in PAM across enterprise platforms.
When does retirement plan eligibility begin?
According to the posting, employees are eligible for the retirement plan after two months.
Does the posting list a salary?
No. The posting does not state a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
Related Jobs