Jobs at Guidepoint Security

• AI Security Architecture & Assessment: Conduct secure configuration reviews and security assessments of enterprise AI platforms (e.g., Anthropic Claude Enterprise, OpenAI ChatGPT Enterprise, Microsoft Copilot) against established control domains — including identity and provisioning, network and access enforcement, data protection and retention, and audit and compliance — identifying vulnerabilities, attack surfaces, and gaps against industry frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS)

• A multi-vendor OT lab with PLC hardware and several visibility and remote access platforms, so clients can compare them side by side before buying
• Vendor-objective advice. We work with many platforms and can tell a client which one fits their environment

• Implement and configure SailPoint IIQ and ISC solutions, including identity lifecycle management, access certifications, access requests, provisioning, and password management
• Build and maintain application onboarding: connectors, aggregation, correlation, and account/entitlement mapping

• Deployment or daily maintenance of ForeScout CounterACT appliances
• Network engineering duties, including physical or logical such as installation and activation of ports, configuration of switches, and LANS, VLANS, and network FW, or appliances or network administration services such as Active Directory, Guests LANS, and domain management

• Work with the joint Palo Alto partner teams to drive 3x pipeline and grow the business to over $500M in two years.
• Continue to drive deal registrations above 65%.

• Identity & Access (Entra ID / AD): Design and implement identity architecture, hybrid sync (Entra Connect), Conditional Access, MFA/passwordless, and identity governance (PIM, RBAC, access reviews, entitlement management).
• Integrate applications via SSO (SAML/OIDC), enterprise app registrations, and SCIM provisioning.

• Deliver secure AI/ML platform implementations across AWS, Azure, Google Cloud, and third-party enterprise AI platforms
• Develop reusable automation frameworks, accelerators, and reference architectures for AI security

• Design Azure cloud solutions with a secure-by-design approach
• Collaborate with customer IT teams to implement and secure cloud resources, implement configurations based on security policies, standards, and best practices

• Complete internal training for Automated Security Validation (ASV).
• Lead complex ASV deployments and partner with customers to address diverse security use cases.

• Connecting client requirements to appropriate technologies and service offerings.
• Improving the accuracy and consistency of technical scoping and delivery.

• Establishing reliable and reusable data pipelines.
• Improving data quality, accessibility, and processing efficiency.

• Focus on AWS-native security tooling and cloud security best practices
• Hands-on consulting engagements from assessment through implementation

• Serve as the primary technical lead on all Duo Security engagements, owning end-to-end delivery from design through implementation and handoff
• Lead Duo deployment architecture and design, including:

Duo MFA — Policy design, user enrollment strategies, self-service portal configuration, and phased rollout planning

Duo Authentication Proxy — Deployment, configuration, high availability, and integration with RADIUS, LDAP, and Active Directory

Duo Single Sign-On (SSO) — SAML 2.0 and OIDC federation, application onboarding, and custom login branding

Duo Device Trust — Trusted endpoint policies, certificate-based device verification, and managed/unmanaged device posture enforcement

Duo Network Gateway (DNG) — Clientless remote access to internal web applications and SSH/RDP resources

Duo Admin Panel & API — Tenant configuration, Admin API and Auth API integrations, custom scripting, and reporting

Duo Trusted Endpoints — Integration with endpoint management platforms (Intune, Jamf, Workspace ONE, etc.)

Duo Desktop (formerly Duo Device Health) — Endpoint health verification and posture-based access policies

• Assist in the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments.
• Architect and implement Zero Trust Segmentation policies, including application dependency mapping, labeling frameworks, enforcement boundaries, and zone-based controls.

• Leadership - Lead a team of cyber security engineers delivering cybersecurity projects using established project management methodologies, define project scope, cost, success criteria, dependencies, assumptions, and constraints with stakeholders
• Deliver Solutions – Design and implement global technologies and services to meet the Federal R...

• Hands-On Technical Development
• Real-World Security Response

• Log Onboarding & Validation
• Normalization & Tagging

• Design & Implement GenAI Solutions: Help design, build, deploy, and manage secure and scalable generative AI solutions using both SaaS and local resources.
• Enable Technical Users: Provide guidance, best practices, and support to internal teams utilizing SaaS AI services to build custom applications.

• Broad architecture knowledge across various network, cloud, identity, application, data, and infrastructure security domains.
• Practitioner knowledge on implementing firewalls, secure web gateways, ZTNA solutions, endpoint security platforms, and data loss prevention technologies.

• Implement and maintain architecture
• Analyze network traffic to identify and document threat patterns.