Practice Lead, Privilege Access Management (PAM)

Location: Remote, U.S.-based only. Up to 25% travel may be required.

Company

hirify.global provides cybersecurity expertise, solutions, and professional services to organizations including Fortune 500 companies and U.S. government agencies.

What you will do

• Own the PAM practice strategy, roadmap, service offerings, delivery methodologies, and growth.
• Lead PAM strategy, assessments, architecture, implementation, migration, transformation, and managed services engagements.
• Design and implement technology-agnostic PAM architectures using platforms such as CyberArk, Delinea, and BeyondTrust.
• Oversee large-scale on-premises, cloud, hybrid, and SaaS PAM programs, governance, quality, and operational standards.
• Lead PAM architects, consultants, engineers, and analysts through coaching, mentoring, and technical direction.
• Support presales, proposals, RFP/RFI responses, SOW development, estimates, client presentations, and vendor relationships.

Requirements

• 12+ years of experience in cybersecurity, IAM, PAM, or related security disciplines, including 7+ years in PAM.
• Hands-on and architectural expertise with one or more enterprise PAM platforms, including CyberArk, Delinea, or BeyondTrust.
• Experience designing enterprise PAM architectures and operating models and leading large-scale transformation, implementation, migration, and modernization programs.
• Knowledge of privileged account discovery, credential rotation, session monitoring, JIT/JEA, Zero Standing Privileges, secrets management, machine identities, cloud privileged access, and DevOps integration.
• Experience integrating PAM with Active Directory/LDAP, SIEM, ITSM, MFA, cloud platforms, databases, infrastructure, applications, and DevOps toolchains.
• Experience leading technical teams and communicating complex security concepts to executives, architects, engineers, and business stakeholders.

Nice to have

• Cybersecurity or PAM/IAM certifications such as CISSP, CISM, CCSP, or CyberArk, Delinea, and BeyondTrust certifications.
• Experience with AWS, Azure, GCP, CyberArk Conjur, Delinea Secret Server, BeyondTrust Password Safe, or comparable secrets-management platforms.
• Experience with PAM automation and APIs, including REST APIs, PowerShell, Python, or Terraform.
• Experience building managed services, professional services practices, strategic vendor relationships, or presales programs.
• Knowledge of ITDR, machine identity security, non-human identities, AI-driven identity security, and cloud-native privileged access.

Culture & Benefits

• Primarily remote workforce with collaboration, mentorship, and professional development opportunities.
• Medical, dental, and HSA plan options with employer premium contributions.
• 12 corporate holidays and a Flexible Time Off program.
• Home internet and mobile phone allowance.
• Retirement plan eligibility after two months at open enrollment and a pet benefit option.

Hiring process

• HR screening requests are scheduled through Zoom Scheduler.
• Application updates are sent through Greenhouse; candidates should check their spam folder for communications.