Practice Lead, PAM

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the overall strategy, vision, roadmap, and growth of the PAM practice across CyberArk, Delinea, BeyondTrust, and other privileged identity technologies.

• Define and uphold service offerings, delivery methodologies, reference architectures, standards, and best practices.

• Offer strategic and technical leadership for PAM strategies, assessments, architecture, implementation, migration, transformation, and managed services engagements.

• Guide the evaluation, design, and implementation of PAM solutions tailored to client requirements and business needs.

• Create technology-agnostic architectures and platform recommendations.

• Establish and enhance PAM capabilities across personnel, processes, and technology.

• Conduct PAM maturity assessments and develop target-state architectures, transformation roadmaps, and implementation plans.

• Supervise complex PAM implementations and migrations across on-premises, cloud, hybrid, and SaaS environments.

• Promote the adoption of Just-In-Time (JIT) access, Zero Standing Privileges, Zero Trust principles, machine identities, secrets management, DevOps integration, and cloud privileged access.

• Develop reusable accelerators, implementation frameworks, and delivery standards.

• Provide technical governance for large-scale PAM initiatives.

• Collaborate with IAM, cybersecurity, cloud, infrastructure, application, DevOps, network, risk, compliance, and audit teams.

• Lead a team of PAM architects, consultants, engineers, and analysts while offering coaching, mentoring, and career development opportunities.

• Assist with presales activities, solutioning, proposals, RFP/RFI responses, SOW development, estimations, and client presentations.

• Maintain relationships with PAM technology vendors and strategic partners.

• Stay informed about emerging technologies and market trends.

• Define and monitor KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction.

• Establish quality assurance and governance processes.

• Act as a trusted advisor to clients and internal stakeholders regarding privileged identity security and PAM transformation.

⛳️ Requirements

• Minimum of 12 years of experience in cybersecurity, IAM, PAM, or related security fields.

• At least 7 years of experience specifically in PAM.

• Hands-on experience with architectural design using CyberArk, Delinea, BeyondTrust, or other contemporary PAM platforms.

• Proven track record in designing and implementing enterprise PAM architectures and operating models.

• Experience leading extensive PAM transformation, implementation, migration, and modernization projects.

• Knowledge of privileged account discovery and onboarding, credential management and rotation, session management, JIT/JEA, Zero Standing Privileges, secrets management, application and machine identities, SSH keys and certificates, cloud privileged access, and DevOps/CI/CD integration.

• Understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management.

• Experience integrating PAM with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains.

• Familiarity with NIST, CIS, ISO 27001, and relevant industry regulations.

• Experience leading technical teams and multidisciplinary security programs.

• Ability to articulate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders.

• Strong consulting, problem-solving, stakeholder management, and executive presentation skills.

• Experience in developing PAM strategies, roadmaps, reference architectures, SOWs, proposals, estimates, and business cases.

• Ability to balance technical depth with business requirements, risk, cost, and operational factors.

• Proficient in utilizing emerging technologies, including AI tools.

• Willingness to travel up to 25%.

• Capability to perform extensive computer-based tasks, including wrist, hand, finger, and visual activities for at least 8 hours daily.

• Preferred: PAM/IAM or cybersecurity certifications, Delinea/BeyondTrust training, secrets-management experience, cloud privileged access, PAM automation and APIs, managed services, consulting practice development, presales/business development, vendor relations, and knowledge of emerging identity-security trends.

🏝️ Benefits

• Primarily remote workforce (U.S. based only).

• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA.

• GuidePoint covers 90% of employee PPO premiums and 70% of family PPO premiums.

• GuidePoint pays 100% of employee HDHP premiums and 75% of family HDHP premiums.

• HSA contributions of $850 annually for employees and $1,750 annually for families.

• Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums.

• 12 corporate holidays.

• Flexible Time Off (FTO) program.

• Healthy mobile phone and home internet allowance.

• Eligibility for a retirement plan after 2 months at open enrollment.

• Pet Benefit Option.

• Collaboration, mentorship, and guidance from knowledgeable colleagues.