{"id":2380987,"url":"https://alion.io/job/guidepoint-security-practice-lead-privilege-access-management-pam","title":"Practice Lead, Privilege Access Management (PAM)","company":{"id":3625,"name":"GuidePoint Security","domain":"guidepointsecurity.com","url":"https://alion.io/company/guidepoint-security","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":17,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Solutions","role_family":"Solutions","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"unspecified","remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":103000,"max_usd":230000,"period":"year","method":"global_role_seniority_cell","sample_n":880},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"BeyondTrust","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"Delinea","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITSM","optional":false},{"name":"LDAP","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"Sentry","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-12T18:21:45Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-13T05:17:48Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.\nGeneral Description\nWe are looking for a skilled Practice Lead, Privilege Access Management (PAM) to lead GuidePoint Security's central Privileged Access Management practice - a dedicated team of architects and consultants delivering presales and post-sales services to internal sellers across all regions. This role will engage in the development of PAM implementation delivery, long-term managed services, and the technical growth and enablement of the practice while providing \"Wow Them\" service to clients and/or internal customers or co-workers.\nThe Practice Lead, PAM will be required to demonstrate strong technical leadership, solution architecture, and delivery management skills, lead by influence, and strong business/financial acumen to drive the use of progressive PAM delivery and managed services programs that will align the delivery business objectives and priorities.\nAbout the Privilege Access Management (PAM) practice\nThe Privilege Access Management (PAM) practice is responsible for delivering PAM implementation projects tied to product sales and providing long-term managed services to customers. We provide presales and post-sales technical services - from scoping and solution design through implementation and ongoing operations - in support of internal sellers across all regions.\nOur team of PAM architects and consultants focuses on designing, deploying, and operating privileged access management solutions that secure, manage, and monitor privileged accounts and credentials. We partner with regional sales teams and customers to accelerate PAM product sales and deliver measurable, lasting security outcomes.\nDelivering high-quality PAM implementation projects that drive and support product sales across all regions.\nProviding long-term managed services that ensure sustained customer value, retention, and operational excellence.\nStandardizing delivery methodologies and building deep technical expertise to scale the practice as a trusted presales and post-sales partner.\nRoles and Responsibilities: \nOwn the overall Privileged Access Management (PAM) practice strategy, vision, roadmap, and growth, covering CyberArk, Delinea, BeyondTrust, and other modern PAM and privileged identity technologies.\nDefine and maintain the practice’s service offerings, delivery methodologies, reference architectures, standards, and best practices.\nProvide strategic and technical leadership across PAM engagements, including strategy, assessment, architecture, implementation, migration, transformation, and managed services.\nLead the evaluation, design, and implementation of PAM solutions based on client requirements, security objectives, technology landscape, and business needs.\nProvide subject matter expertise across leading PAM platforms, including CyberArk, Delinea, BeyondTrust, and emerging privileged identity and secrets management technologies.\nDevelop technology-agnostic PAM architectures and solution recommendations, selecting the appropriate platform based on use cases, scalability, integration requirements, security controls, and total cost of ownership.\nEstablish and mature PAM capabilities across people, process, and technology, including governance, operating models, controls, service management, and continuous improvement.\nLead PAM maturity assessments and develop target-state architectures, transformation roadmaps, and implementation plans.\nOversee complex PAM implementations and migrations, including on-premises, cloud, hybrid, and SaaS-based PAM environments.\nDrive adoption of modern PAM capabilities such as Just-in-Time (JIT) access, Zero Standing Privileges (ZSP), Zero Trust, machine identities, secrets management, application identities, DevOps integration, and cloud privileged access.\nDevelop and maintain PAM reference architectures, reusable accelerators, implementation frameworks, and delivery standards across the practice.\nProvide technical governance and oversight for large-scale PAM programs and ensure solutions meet security, architecture, compliance, and operational requirements.\nPartner with IAM, Cybersecurity, Cloud, Infrastructure, Application, DevOps, Network, Risk, Compliance, and Audit teams to integrate PAM into the broader identity and security ecosystem.\nLead technical teams consisting of PAM architects, consultants, engineers, and analysts; provide coaching, mentoring, and career development.\nSupport pre-sales, solutioning, proposals, RFP/RFI responses, SOW development, effort estimation, and client presentations.\nBuild and maintain strong relationships with PAM technology vendors and strategic partners, including CyberArk, Delinea, and BeyondTrust.\nMonitor the PAM technology landscape and evaluate emerging technologies, market trends, and new capabilities to continuously evolve the practice.\nDefine and track practice KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction.\nEstablish quality assurance and governance processes to ensure consistent delivery across PAM engagements.\nAct as a senior trusted advisor to clients and internal stakeholders on privileged identity security and PAM transformation.\n Required Experience and Education: \n12+ years of experience in cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), or related security disciplines.\n7+ years of experience in PAM, with demonstrated expertise across multiple enterprise PAM platforms.\nStrong hands-on and architectural experience with one or more leading PAM platforms, including:\nCyberArk\nDelinea\nBeyondTrust\nOther modern PAM, privileged identity, secrets management, or identity security platforms.\nDemonstrated experience designing and implementing enterprise PAM architectures and operating models.\nExperience leading large-scale PAM transformation, implementation, migration, and modernization programs.\nStrong understanding of PAM capabilities, including:\nPrivileged account discovery and onboarding\nCredential management and rotation\nPrivileged session management and monitoring\nJust-in-Time (JIT) and Just-Enough-Access (JEA)\nZero Standing Privileges\nService and application accounts\nSecrets management\nApplication and machine identities\nSSH key and certificate management\nCloud privileged access\nDevOps and CI/CD integration\nStrong understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management.\nExperience integrating PAM platforms with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains.\nStrong understanding of security frameworks and regulatory requirements, including NIST, CIS, ISO 27001, and applicable industry regulations.\nProven experience leading technical teams and multidisciplinary security programs.\nDemonstrated ability to communicate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders.\nStrong consulting, problem-solving, stakeholder management, and executive presentation skills.\nExperience developing PAM strategies, roadmaps, reference architectures, SOWs, proposals, estimates, and business cases.\nAbility to balance technical depth, business requirements, risk, cost, and operational considerations when making technology decisions. \nEmbraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.\nPreferred Experience and Education: \nProfessional certifications in PAM/IAM or cybersecurity, such as CyberArk Defender/Sentry/Trustee, CISSP, CISM, CCSP, or equivalent.\nCertifications or advanced training in Delinea and/or BeyondTrust technologies.\nExperience with CyberArk Conjur, Delinea Secret Server/DevOps Secrets Vault, BeyondTrust Password Safe, or comparable secrets-management capabilities.\nExperience with AWS, Azure, and/or GCP privileged access and identity security.\nStrong experience with PAM automation and APIs, including REST APIs, PowerShell, Python, Terraform, or similar technologies.\nExperience developing PAM managed services or operational support models.\nExperience building or growing a PAM professional services/consulting practice.\nProven pre-sales and business development experience, including client workshops, RFP responses, proposals, and solution presentations.\nExperience establishing strategic relationships with PAM technology vendors and alliance partners.\nKnowledge of emerging areas such as Identity Threat Detection and Response (ITDR), machine identity security, non-human identities (NHI), AI-driven identity security, and cloud-native privileged access.\nSoft Skills:\nExcellent communication and presentation skills\nStrong problem-solving and analytical abilities\nCustomer-focused mindset with consulting approach\nAbility to explain complex technical concepts to non-technical audiences\nProject management and organizational skills\nAbility to work independently and manage multiple priorities\nTravel Requirements:\nUp to 25% travel\nPhysical Requirements:\nSedentary work\nSubstantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day\nRequired to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day\nWe use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.\n\nWhy GuidePoint?\n GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.\nFirmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity. \nThis is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.\nSome added perks….\nRemote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)\nGroup Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)\nGroup Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans\n12 corporate holidays and a Flexible Time Off (FTO) program\nHealthy mobile phone and home internet allowance\nEligibility for retirement plan after 2 months at open enrollment\nPet Benefit Option","description_format":"text","description_chars":11739,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Flexible time off","Health insurance","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Information Security","Managed Security","IT Resellers & VARs"],"lifecycle":[{"event":"open","at":"2026-10-12T19:22:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 3","filings_12m":4,"filings_prev_12m":12,"green_card_filings_12m":3,"median_offered_wage_usd":126786,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":23,"reasons":["conf:0","win:early"],"computed_at":"2026-10-13T05:25:23Z"},"pay":null,"html_url":"https://alion.io/job/guidepoint-security-practice-lead-privilege-access-management-pam","json_url":"https://alion.io/job/guidepoint-security-practice-lead-privilege-access-management-pam.json","meta":{"generated_at":"2026-10-13T05:25:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8378,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3625},"rest":"https://alion.io/mcp/rest/get_company?id=3625"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fguidepoint-security-practice-lead-privilege-access-management-pam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fguidepoint-security-practice-lead-privilege-access-management-pam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fguidepoint-security-practice-lead-privilege-access-management-pam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/guidepoint-security-practice-lead-privilege-access-management-pam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fguidepoint-security-practice-lead-privilege-access-management-pam"}]}