Practice Lead, Privilege Access Management (PAM)

Job description

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk. **General Description** We are looking for a skilled Practice Lead, Privilege Access Management (PAM) to lead GuidePoint Security's central Privileged Access Management practice — a dedicated team of architects and consultants delivering presales and post-sales services to internal sellers across all regions. This role will engage in the development of PAM implementation delivery, long-term managed services, and the technical growth and enablement of the practice while providing "Wow Them" service to clients and/or internal customers or co-workers. The Practice Lead, PAM will be required to demonstrate strong technical leadership, solution architecture, and delivery management skills, lead by influence, and strong business/financial acumen to drive the use of progressive PAM delivery and managed services programs that will align the delivery business objectives and priorities. **About the Privilege Access Management (PAM) practice** The Privilege Access Management (PAM) practice is responsible for delivering PAM implementation projects tied to product sales and providing long-term managed services to customers. We provide presales and post-sales technical services — from scoping and solution design through implementation and ongoing operations — in support of internal sellers across all regions. Our team of PAM architects and consultants focuses on designing, deploying, and operating privileged access management solutions that secure, manage, and monitor privileged accounts and credentials. We partner with regional sales teams and customers to accelerate PAM product sales and deliver measurable, lasting security outcomes. - Delivering high-quality PAM implementation projects that drive and support product sales across all regions. - Providing long-term managed services that ensure sustained customer value, retention, and operational excellence. - Standardizing delivery methodologies and building deep technical expertise to scale the practice as a trusted presales and post-sales partner. **Roles and Responsibilities:** - Own the overall Privileged Access Management (PAM) practice strategy, vision, roadmap, and growth, covering CyberArk, Delinea, BeyondTrust, and other modern PAM and privileged identity technologies. - Define and maintain the practice’s service offerings, delivery methodologies, reference architectures, standards, and best practices. - Provide strategic and technical leadership across PAM engagements, including strategy, assessment, architecture, implementation, migration, transformation, and managed services. - Lead the evaluation, design, and implementation of PAM solutions based on client requirements, security objectives, technology landscape, and business needs. - Provide subject matter expertise across leading PAM platforms, including CyberArk, Delinea, BeyondTrust, and emerging privileged identity and secrets management technologies. - Develop technology-agnostic PAM architectures and solution recommendations, selecting the appropriate platform based on use cases, scalability, integration requirements, security controls, and total cost of ownership. - Establish and mature PAM capabilities across people, process, and technology, including governance, operating models, controls, service management, and continuous improvement. - Lead PAM maturity assessments and develop target-state architectures, transformation roadmaps, and implementation plans. - Oversee complex PAM implementations and migrations, including on-premises, cloud, hybrid, and SaaS-based PAM environments. - Drive adoption of modern PAM capabilities such as Just-in-Time (JIT) access, Zero Standing Privileges (ZSP), Zero Trust, machine identities, secrets management, application identities, DevOps integration, and cloud privileged access. - Develop and maintain PAM reference architectures, reusable accelerators, implementation frameworks, and delivery standards across the practice. - Provide technical governance and oversight for large-scale PAM programs and ensure solutions meet security, architecture, compliance, and operational requirements. - Partner with IAM, Cybersecurity, Cloud, Infrastructure, Application, DevOps, Network, Risk, Compliance, and Audit teams to integrate PAM into the broader identity and security ecosystem. - Lead technical teams consisting of PAM architects, consultants, engineers, and analysts; provide coaching, mentoring, and career development. - Support pre-sales, solutioning, proposals, RFP/RFI responses, SOW development, effort estimation, and client presentations. - Build and maintain strong relationships with PAM technology vendors and strategic partners, including CyberArk, Delinea, and BeyondTrust. - Monitor the PAM technology landscape and evaluate emerging technologies, market trends, and new capabilities to continuously evolve the practice. - Define and track practice KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction. - Establish quality assurance and governance processes to ensure consistent delivery across PAM engagements. - Act as a senior trusted advisor to clients and internal stakeholders on privileged identity security and PAM transformation. **Required Experience and Education:** - 12+ years of experience in cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), or related security disciplines. - 7+ years of experience in PAM, with demonstrated expertise across multiple enterprise PAM platforms. - Strong hands-on and architectural experience with one or more leading PAM platforms, including: - CyberArk - Delinea - BeyondTrust - Other modern PAM, privileged identity, secrets management, or identity security platforms. - Demonstrated experience designing and implementing enterprise PAM architectures and operating models. - Experience leading large-scale PAM transformation, implementation, migration, and modernization programs. - Strong understanding of PAM capabilities, including: - Privileged account discovery and onboarding - Credential management and rotation - Privileged session management and monitoring - Just-in-Time (JIT) and Just-Enough-Access (JEA) - Zero Standing Privileges - Service and application accounts - Secrets management - Application and machine identities - SSH key and certificate management - Cloud privileged access - DevOps and CI/CD integration - Strong understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management. - Experience integrating PAM platforms with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains. - Strong understanding of security frameworks and regulatory requirements, including NIST, CIS, ISO 27001, and applicable industry regulations. - Proven experience leading technical teams and multidisciplinary security programs. - Demonstrated ability to communicate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders. - Strong consulting, problem-solving, stakeholder management, and executive presentation skills. - Experience developing PAM strategies, roadmaps, reference architectures, SOWs, proposals, estimates, and business cases. - Ability to balance technical depth, business requirements, risk, cost, and operational considerations when making technology decisions. - Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes. **Preferred Experience and Education:** - Professional certifications in PAM/IAM or cybersecurity, such as CyberArk Defender/Sentry/Trustee, CISSP, CISM, CCSP, or equivalent. - Certifications or advanced training in Delinea and/or BeyondTrust technologies. - Experience with CyberArk Conjur, Delinea Secret Server/DevOps Secrets Vault, BeyondTrust Password Safe, or comparable secrets-management capabilities. - Experience with AWS, Azure, and/or GCP privileged access and identity security. - Strong experience with PAM automation and APIs, including REST APIs, PowerShell, Python, Terraform, or similar technologies. - Experience developing PAM managed services or operational support models. - Experience building or growing a PAM professional services/consulting practice. - Proven pre-sales and business development experience, including client workshops, RFP responses, proposals, and solution presentations. - Experience establishing strategic relationships with PAM technology vendors and alliance partners. - Knowledge of emerging areas such as Identity Threat Detection and Response (ITDR), machine identity security, non-human identities (NHI), AI-driven identity security, and cloud-native privileged access. **Soft Skills:** - Excellent communication and presentation skills - Strong problem-solving and analytical abilities - Customer-focused mindset with consulting approach - Ability to explain complex technical concepts to non-technical audiences - Project management and organizational skills - Ability to work independently and manage multiple priorities **Travel Requirements:** - Up to 25% travel **Physical Requirements:** - Sedentary work - Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day - Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day **We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.** **Why GuidePoint?**GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers. Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity. This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation. **Some added perks….** - Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) - Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options) - Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans - 12 corporate holidays and a Flexible Time Off (FTO) program - Healthy mobile phone and home internet allowance - Eligibility for retirement plan after 2 months at open enrollment - Pet Benefit Option