GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

General Description

We are looking for a skilled Practice Lead, Privilege Access Management (PAM) to lead GuidePoint Security's central Privileged Access Management practice — a dedicated team of architects and consultants delivering presales and post-sales services to internal sellers across all regions. This role will engage in the development of PAM implementation delivery, long-term managed services, and the technical growth and enablement of the practice while providing "Wow Them" service to clients and/or internal customers or co-workers.

The Practice Lead, PAM will be required to demonstrate strong technical leadership, solution architecture, and delivery management skills, lead by influence, and strong business/financial acumen to drive the use of progressive PAM delivery and managed services programs that will align the delivery business objectives and priorities.

About the Privilege Access Management (PAM) practice

The Privilege Access Management (PAM) practice is responsible for delivering PAM implementation projects tied to product sales and providing long-term managed services to customers. We provide presales and post-sales technical services — from scoping and solution design through implementation and ongoing operations — in support of internal sellers across all regions.

Our team of PAM architects and consultants focuses on designing, deploying, and operating privileged access management solutions that secure, manage, and monitor privileged accounts and credentials. We partner with regional sales teams and customers to accelerate PAM product sales and deliver measurable, lasting security outcomes.

Delivering high-quality PAM implementation projects that drive and support product sales across all regions.
Providing long-term managed services that ensure sustained customer value, retention, and operational excellence.
Standardizing delivery methodologies and building deep technical expertise to scale the practice as a trusted presales and post-sales partner.

Roles and Responsibilities:

Own the overall Privileged Access Management (PAM) practice strategy, vision, roadmap, and growth, covering CyberArk, Delinea, BeyondTrust, and other modern PAM and privileged identity technologies.
Define and maintain the practice’s service offerings, delivery methodologies, reference architectures, standards, and best practices.
Provide strategic and technical leadership across PAM engagements, including strategy, assessment, architecture, implementation, migration, transformation, and managed services.
Lead the evaluation, design, and implementation of PAM solutions based on client requirements, security objectives, technology landscape, and business needs.
Provide subject matter expertise across leading PAM platforms, including CyberArk, Delinea, BeyondTrust, and emerging privileged identity and secrets management technologies.
Develop technology-agnostic PAM architectures and solution recommendations, selecting the appropriate platform based on use cases, scalability, integration requirements, security controls, and total cost of ownership.
Establish and mature PAM capabilities across people, process, and technology, including governance, operating models, controls, service management, and continuous improvement.
Lead PAM maturity assessments and develop target-state architectures, transformation roadmaps, and implementation plans.
Oversee complex PAM implementations and migrations, including on-premises, cloud, hybrid, and SaaS-based PAM environments.
Drive adoption of modern PAM capabilities such as Just-in-Time (JIT) access, Zero Standing Privileges (ZSP), Zero Trust, machine identities, secrets management, application identities, DevOps integration, and cloud privileged access.
Develop and maintain PAM reference architectures, reusable accelerators, implementation frameworks, and delivery standards across the practice.
Provide technical governance and oversight for large-scale PAM programs and ensure solutions meet security, architecture, compliance, and operational requirements.
Partner with IAM, Cybersecurity, Cloud, Infrastructure, Application, DevOps, Network, Risk, Compliance, and Audit teams to integrate PAM into the broader identity and security ecosystem.
Lead technical teams consisting of PAM architects, consultants, engineers, and analysts; provide coaching, mentoring, and career development.
Support pre-sales, solutioning, proposals, RFP/RFI responses, SOW development, effort estimation, and client presentations.
Build and maintain strong relationships with PAM technology vendors and strategic partners, including CyberArk, Delinea, and BeyondTrust.
Monitor the PAM technology landscape and evaluate emerging technologies, market trends, and new capabilities to continuously evolve the practice.
Define and track practice KPIs, delivery metrics, quality standards, utilization, revenue, profitability, and customer satisfaction.
Establish quality assurance and governance processes to ensure consistent delivery across PAM engagements.
Act as a senior trusted advisor to clients and internal stakeholders on privileged identity security and PAM transformation.

Required Experience and Education:

12+ years of experience in cybersecurity, Identity and Access Management (IAM), Privileged Access Management (PAM), or related security disciplines.
7+ years of experience in PAM, with demonstrated expertise across multiple enterprise PAM platforms.
Strong hands-on and architectural experience with one or more leading PAM platforms, including:

CyberArk
Delinea
BeyondTrust
Other modern PAM, privileged identity, secrets management, or identity security platforms.

Demonstrated experience designing and implementing enterprise PAM architectures and operating models.
Experience leading large-scale PAM transformation, implementation, migration, and modernization programs.
Strong understanding of PAM capabilities, including:

Privileged account discovery and onboarding
Credential management and rotation
Privileged session management and monitoring
Just-in-Time (JIT) and Just-Enough-Access (JEA)
Zero Standing Privileges
Service and application accounts
Secrets management
Application and machine identities
SSH key and certificate management
Cloud privileged access
DevOps and CI/CD integration

Strong understanding of IAM, Zero Trust, identity governance, MFA, RBAC/ABAC, SSO, and identity lifecycle management.
Experience integrating PAM platforms with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, servers, network devices, applications, and DevOps toolchains.
Strong understanding of security frameworks and regulatory requirements, including NIST, CIS, ISO 27001, and applicable industry regulations.
Proven experience leading technical teams and multidisciplinary security programs.
Demonstrated ability to communicate complex technical concepts to executives, security leaders, architects, engineers, and business stakeholders.
Strong consulting, problem-solving, stakeholder management, and executive presentation skills.
Experience developing PAM strategies, roadmaps, reference architectures, SOWs, proposals, estimates, and business cases.
Ability to balance technical depth, business requirements, risk, cost, and operational considerations when making technology decisions.
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education:

Professional certifications in PAM/IAM or cybersecurity, such as CyberArk Defender/Sentry/Trustee, CISSP, CISM, CCSP, or equivalent.
Certifications or advanced training in Delinea and/or BeyondTrust technologies.
Experience with CyberArk Conjur, Delinea Secret Server/DevOps Secrets Vault, BeyondTrust Password Safe, or comparable secrets-management capabilities.
Experience with AWS, Azure, and/or GCP privileged access and identity security.
Strong experience with PAM automation and APIs, including REST APIs, PowerShell, Python, Terraform, or similar technologies.
Experience developing PAM managed services or operational support models.
Experience building or growing a PAM professional services/consulting practice.
Proven pre-sales and business development experience, including client workshops, RFP responses, proposals, and solution presentations.
Experience establishing strategic relationships with PAM technology vendors and alliance partners.
Knowledge of emerging areas such as Identity Threat Detection and Response (ITDR), machine identity security, non-human identities (NHI), AI-driven identity security, and cloud-native privileged access.

Soft Skills:

Excellent communication and presentation skills
Strong problem-solving and analytical abilities
Customer-focused mindset with consulting approach
Ability to explain complex technical concepts to non-technical audiences
Project management and organizational skills
Ability to work independently and manage multiple priorities

Travel Requirements:

Up to 25% travel

Physical Requirements:

Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.

Why GuidePoint?

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive all aspects of the business, which have been paramount to the company’s success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.

Some added perks….

Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
12 corporate holidays and a Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option

About the company

GuidePoint Security helps organizations assess and reduce cybersecurity risk through a mix of security technologies, consulting, and managed security services for enterprise and government clients. It works by assessing a client’s security posture, recommending and deploying appropriate tools and controls, and continuously monitoring and managing security operations to detect and respond to threats. The company differentiates itself with deep industry knowledge and hands-on practitioner experience from the DoD, Intelligence Communities, and Fortune 500, enabling tailored solutions for complex, mission-critical needs instead of generic products. Its goal is to help clients make informed security decisions, lower risk exposure, and defend against evolving cyber threats using a combination of technology, expertise, and managed services.

Company Size

1,001-5,000

Company Stage

Growth Equity (Non-Venture Capital)

Total Funding

N/A

Headquarters

Reston, Virginia

Founded

2011

Get referred to GuidePoint Security

See people who can refer or advise you

Simplify's Take

What believers are saying

September 29, 2026 Optery partnership expands employee and executive data-removal demand.
August 24, 2026 SOCRadar collaboration strengthens external threat intelligence for GuidePoint customers.
September 15, 2026 IAM services align with rising AI-agent and machine-identity security budgets.

What critics are saying

Audax-backed growth capital pressures GuidePoint to expand faster and sustain margins by 2027.
Reseller partnerships with SOCRadar, Optery, JumpCloud, and Astelia leave vendors controlling product differentiation.
Okta, SailPoint, and Microsoft Entra compress IAM services; GuidePoint needs repeatable proprietary outcomes.

What makes GuidePoint Security unique

GuidePoint bundles advisory, integration, and resale across enterprise and public-sector security.
September 15, 2026 IAM launch targets agentic AI, IDV, and non-human identities.
September 2, 2026 Astelia partnership adds reachability-first exposure management on existing scanners.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance
Dental Insurance
Paid Holidays
Unlimited Paid Time Off
Remote Work Options
Phone/Internet Stipend
401(k) Retirement Plan
Pet Insurance

Growth & Insights and Company News

6 month growth

17%

1 year growth

17%

2 year growth

17%

Torq

Oct 20th, 2026

Meet GuidePoint Security.

Meet GuidePoint Security. GuidePoint Security works with organizations of every size, from a few hundred employees up through Fortune 100 companies. Its approach is deliberately vendor-objective: the firm evaluates a wide range of security technologies so it can recommend what best fits a customer's environment and goals. That work is backed by a team of certified engineers, architects, and consultants. GuidePoint and Torq bring complementary strengths to the table. GuidePoint provides advisory and services expertise to help customers assess, deploy, and operationalize security technology, and the Torq AI SOC Platform gives them agentic AI and automation across the threat lifecycle, from triage through investigation and response, with analysts in the loop for decisions that require human judgment. Working together, the focus is the same: helping customers reach the security outcomes they're after. That partnership mindset is what Mateo Gutierrez, Senior Account Executive at Guidepoint, keeps coming back to. "It's not just here you go, see you later," Gutierrez said. "It's much more of a true partnership with our customers: step by step, how is this going to impact your roadmap over the next three to five years, and how do we help you get there?" Gutierrez is candid that customers face a lot of complexity, and they lean on GuidePoint for the expertise to work through it. Focused on customer outcomes. Many security teams are fielding more alerts than they can clear and running more tools than they have the headcount to operate. Working together, GuidePoint and Torq help customers operationalize their existing resources so their teams can respond faster and focus on the work that matters most. "Security teams have been underwater for a long time," Gutierrez said. "When you can accelerate and automate the threat detection, investigation, and response lifecycle, organizations reach the outcomes they're after without exhausting their resources." For GuidePoint, much of the value is in helping customers get more out of what they've already invested in. "So much of our job is helping customers operationalize what they've already bought," Gutierrez said, "and get mean time to respond and mean time to resolve down from days to, hopefully, minutes." That time-to-outcome is what customers care about most. "What customers really care about is the ROI from a time perspective," Gutierrez said. "How much investigation and containment can happen before a human even has to step in?" As an example of what that can look like, a Torq live demo resolved an incident that would normally take two to three days start to finish in 15 minutes or less, with several integrations handling containment automatically. Support that continues after go-live. GuidePoint doesn't hand customers a platform and walk away. They back the partnership with a technical bench that keeps tuning the deployment after go-live. "We have people who can support it from a services standpoint and continuously fine-tune it to reach those outcomes," Gutierrez said. Because GuidePoint often helped the customer select the tools involved, it's well positioned to bring everything together for them. "It's lockstep," he said. Customers are modernizing their security operations, whether their partner leads that conversation or not, and GuidePoint is choosing to lead it. "I only see this partnership [with Torq] growing," Gutierrez added. "It comes up in more and more of our customer conversations." Interested in partnering with Torq to solve customer challenges?

MSSP Alert

Oct 19th, 2026

GuidePoint names Thornberry CBO to grow AI, hyperscaler partnerships.

GuidePoint names Thornberry CBO to grow AI, hyperscaler partnerships. October 19, 2026 GuidePoint Security has promoted Mark Thornberry to chief business officer, a newly created role aimed at accelerating the company's work with top AI platforms, hyperscalers, and emerging startups. Thornberry, who previously led GuidePoint's vendor relationships group for four years, will now focus on expanding and deepening critical partnerships in key market segments, based on information published by CRN. In his expanded role, Thornberry will oversee GuidePoint's strategy for AI platforms, hyperscalers, and venture capital firms, moving beyond siloed approaches to a more integrated ecosystem strategy. This move signals an increased focus and investment in these crucial partnerships to facilitate further organic growth. The cybersecurity solutions provider aims to strengthen its connections with AI model providers, recognizing the transformative impact of AI technologies on cybersecurity. Additionally, GuidePoint will enhance its hyperscaler partnerships and deepen relationships with venture capital and private equity firms, enabling earlier engagement with promising security startups. This strategic shift allows GuidePoint to capitalize on the rapid development and market entry of new vendors, ensuring a more thoughtful and measured approach to partnerships without altering the company's core identity. An in-depth guide to AI. Get essential knowledge and practical strategies to use AI to better your security program.

GlobeNewswire

Sep 29th, 2026

Optery now offered through GuidePoint Security in reseller partnership expansion.

Optery now offered through GuidePoint Security in reseller partnership expansion. September 29, 2026 09:00 ET | Source: Optery New reseller partnership gives GuidePoint Security customers access to Optery for Business to remove the personal data threat actors use to target employees and executives SAN FRANCISCO, Sept. 29, 2026 (GLOBE NEWSWIRE) - Optery, the leading provider of enterprise-grade personal data removal software, today announced a new reseller partnership with GuidePoint Security, the leading cybersecurity solution provider that helps organizations make better decisions that minimize risk. Through the partnership, GuidePoint Security customers can now purchase Optery for Business to find and remove personal information about employees and executives from data broker and people-search sites. Threat actors use personal and professional details exposed on data broker sites to research and target people inside organizations with both cyber and physical threats. Security teams often have limited visibility into this external exposure. Optery for Business helps reduce that attack surface at scale, helping prevent social engineering, account takeovers, doxxing, and physical targeting. "Organizations have invested heavily in protecting corporate systems, but attackers often bypass those defenses by targeting the people with access to them," said Lawrence Gentilello, CEO and founder of Optery. "Making Optery available through GuidePoint Security gives customers a practical way to reduce the exploitable personal and professional data that fuels targeted social engineering and physical threats, helping lower the volume of attacks against their employees and organizations." Optery for Business combines patented search technology, advanced matching, monthly rescans, and automated and custom removals across hundreds of data broker and people-search sites. Before-and-after screenshots verify exposure and removal results. A self-service administrative dashboard lets security and IT teams enroll employees, monitor exposure, track removal status, and measure organization-level progress. Enterprise capabilities include SSO, SCIM, APIs, MCP, and webhooks, and Optery is SOC 2 Type II attested. Independent evaluations have repeatedly validated Optery's effectiveness and industry leadership. CNET named Optery Editors' Choice and the Best Overall Data Removal Service of 2026, ranking it number one among leading data removal services. PCMag has named Optery Editors' Choice for five consecutive years. In a TechCrunch evaluation, Optery found nearly 50 exposed profiles that had remained after the journalist used a competitor. Optery is the most awarded personal data removal service in the industry, with major cybersecurity and technology recognition from CNET, PCMag, Cyber Defense Magazine, the Cybersecurity Excellence Awards, the Globee(R) Awards, SiliconANGLE, the Fortress Cybersecurity Awards, Fast Company and Evan Kirstel's GovCloud Network Love Tech Awards. "As attackers exploit employees' personal information to tailor and launch attacks, organizations need to account for employee and executive exposure as part of their overall risk posture," said Mark Thornberry, senior vice president of partnerships at GuidePoint Security. "Reducing that exposure is necessary as part of a layered defense against social engineering, impersonation, and other identity-based threats." Optery for Business is now available through GuidePoint Security. To learn more, visit optery.com/business. About Optery Optery is the first company to offer a free report with dozens of screenshots showing where your personal information is being posted by hundreds of data brokers online, and the first to offer security teams a completely self-service platform for finding and removing employee personal information from the web. Optery subscription plans automatically remove customers from these sites, clearing your home address, phone number, email, and other personal information from the Internet at scale. The service provides users with a proactive defense against PII-based threats. Optery has completed its AICPA SOC 2, Type II security attestation, and distinguishes itself with unparalleled search technology, data removal automation, visual evidence-based before-and-after reporting, data broker coverage, and API integration options. Over one million people and 1,000 businesses use Optery to prevent attacks and keep their personal information off the Internet. For more information, visit www.optery.com. Contact Sara Trammell [email protected]

GuidePoint Security

Sep 20th, 2026

GuidePoint Security Attracts New Round of Growth Capital

Audax Private Equity invests in cybersecurity solutions provider to fuel expansion HERNDON, Va. (October 10, 2023) — GuidePoint Security, a […]

Yahoo Finance

Sep 15th, 2026

GuidePoint Security launches three IAM services for agentic AI, identity verification, and non-human identities

GuidePoint Security has launched three new Identity and Access Management (IAM) service offerings: Agentic AI, Identity Verification (IDV), and Non-human Identity (NHI). The services help organisations assess, govern, and secure various identity types throughout their lifecycle. An IDC study sponsored by GuidePoint found that whilst 77.3% of organisations report high confidence in their visibility across human and non-human identities, only 18.5% run continuous identity discovery. Among non-human identities, only 41.5% include bots and AI agents in their identity management programmes. The new offerings build on GuidePoint's existing expertise across identity governance and administration, access management, privileged access management, customer identity and access management, and Microsoft identity. The Agentic AI service establishes control over AI agents, IDV strengthens defences against identity fraud, and NHI improves visibility across non-human identity lifecycles.