Our team of PAM architects and consultants focuses on designing, deploying, and operating privileged access management solutions that secure, manage, and monitor privileged accounts and credentials. We partner with regional sales teams and customers to accelerate PAM product sales and deliver measurable, lasting security outcomes.
Delivering high-quality PAM implementation projects that drive and support product sales across all regions.
Providing long-term managed services that ensure sustained customer value, retention, and operational excellence.
Standardizing delivery methodologies and building deep technical expertise to scale the practice as a trusted presales and post-sales partner.
Roles and Responsibilities
Own the overall Privileged Access Management (PAM) practice strategy, vision, roadmap, and growth, covering CyberArk, Delinea, BeyondTrust, and other modern PAM and privileged identity technologies.
Define and maintain the practice’s service offerings, delivery methodologies, reference architectures, standards, and best practices.
Provide strategic and technical leadership across PAM engagements, including strategy, assessment, architecture, implementation, migration, transformation, and managed services.
Lead the evaluation, design, and implementation of PAM solutions based on client requirements, security objectives, technology landscape, and business needs.
Provide subject matter expertise across leading PAM platforms, including CyberArk, Delinea, BeyondTrust, and emerging privileged identity and secrets management technologies.
Develop technology-agnostic PAM architectures and solution recommendations, selecting the appropriate platform based on use cases, scalability, integration requirements, security controls, and total cost of ownership.
Establish and mature PAM capabilities across people, process, and technology, including governance, operating models, controls, service management, and continuous improvement.
Lead PAM maturity assessments and develop target-state architectures, transformation roadmaps, and implementation plans.
Oversee complex PAM implementations and migrations, including on-premises, cloud, hybrid, and SaaS-based PAM environments.
Drive adoption of modern PAM capabilities such as Just-in-Time (JIT) access, Zero Standing Privileges (ZSP), Zero Trust, machine identities, secrets management, application identities, DevOps integration, and cloud privileged access.
Develop and maintain PAM reference architectures, reusable accelerators, implementation frameworks, and delivery standards across the practice.
Provide technical governance and oversight for large-scale PAM programs and ensure solutions meet security, architecture, compliance, and operational requirements.
Partner with IAM, Cybersecurity, Cloud, Infrastructure, Application, DevOps, Network, Risk, Compliance, and Audit teams to integrate PAM into the broader identity and security ecosystem.
Lead technical teams consisting of PAM architects, consultants, engineers, and analysts; provide coaching, mentoring, and career development.
Support pre-sales, solutioning, proposals, RFP/RFI responses, SOW development, effort estimation, and client presentations.
Build and maintain strong relationships with PAM technology vendors and strategic partners, including CyberArk, Delinea, and BeyondTrust.
Monitor the PAM technology landscape and evaluate emerging technologies, market trends, and new capabilities to continuously evolve the practice.
Define and track practice KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction.
Establish quality assurance and governance processes to ensure consistent delivery across PAM engagements.
Act as a senior trusted advisor to clients and internal stakeholders on privileged identity security and PAM transformation.
Required Experience and Education
12+ years of experience in cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), or related security disciplines.
7+ years of experience in PAM, with demonstrated expertise across multiple enterprise PAM platforms.
Strong hands-on and architectural experience with one or more leading PAM platforms, including:
CyberArk
Delinea
BeyondTrust
Other modern PAM, privileged identity, secrets management, or identity security platforms.
Demonstrated experience designing and implementing enterprise PAM architectures and operating models.
Experience leading large-scale PAM transformation, implementation, migration, and modernization programs.
Strong understanding of PAM capabilities, including
Privileged account discovery and onboarding
Credential management and rotation
Privileged session management and monitoring
Just-in-Time (JIT) and Just-Enough-Access (JEA)
Zero Standing Privileges
Service and application accounts
Secrets management
Application and machine identities
SSH key and certificate management
Cloud privileged access
DevOps and CI/CD integration
Strong understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management.
Experience integrating PAM platforms with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains.
Strong understanding of security frameworks and regulatory requirements, including NIST, CIS, ISO 27001, and applicable industry regulations.
Proven experience leading technical teams and multidisciplinary security programs.
Demonstrated ability to communicate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders.
Strong consulting, problem-solving, stakeholder management, and executive presentation skills.
Experience developing PAM strategies, roadmaps, reference architectures, SOWs, proposals, estimates, and business cases.
Ability to balance technical depth, business requirements, risk, cost, and operational considerations when making technology decisions.
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Preferred Experience and Education
Professional certifications in PAM/IAM or cybersecurity, such as CyberArk Defender/Sentry/Trustee, CISSP, CISM, CCSP, or equivalent.
Certifications or advanced training in Delinea and/or BeyondTrust technologies.
Experience with CyberArk Conjur, Delinea Secret Server/DevOps Secrets Vault, BeyondTrust Password Safe, or comparable secrets-management capabilities.
Experience with AWS, Azure, and/or GCP privileged access and identity security.
Strong experience with PAM automation and APIs, including REST APIs, PowerShell, Python, Terraform, or similar technologies.
Experience developing PAM managed services or operational support models.
Experience building or growing a PAM professional services/consulting practice.
Proven pre-sales and business development experience, including client workshops, RFP responses, proposals, and solution presentations.
Experience establishing strategic relationships with PAM technology vendors and alliance partners.
Knowledge of emerging areas such as Identity Threat Detection and Response (ITDR), machine identity security, non-human identities (NHI), AI-driven identity security, and cloud-native privileged access.
Soft Skills
Excellent communication and presentation skills
Strong problem-solving and analytical abilities
Customer-focused mindset with consulting approach
Ability to explain complex technical concepts to non-technical audiences
Project management and organizational skills
Ability to work independently and manage multiple priorities
Travel Requirements
Up to 25% travel
Physical Requirements
Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
Why GuidePoint?
GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.
Some added perks….
Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
12 corporate holidays and a Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option
