Senior Security Consultant, NHI (Non-Human Identity)

The role

This person will support the discovery, governance, and security of non-human identities across enterprise, cloud, and DevOps environments. They will develop NHI discovery, risk scoring, and lifecycle programs while integrating security with various identity and automation platforms.

What you will do

• Serve as a senior subject matter expert for Non-Human Identity (NHI) security.
• Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes.
• Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities.
• Define and implement NHI security controls aligned with Zero Trust and least privilege principles.
• Leverage modern NHI security platforms to discover, analyze, monitor, and remediate non-human identities.
• Develop NHI risk scoring and prioritization models.
• Analyze NHI relationships and dependencies across various environments.
• Identify and remediate credential sprawl, hardcoded secrets, and excessive privileges.
• Establish NHI ownership and accountability with various technical teams.
• Develop and maintain NHI lifecycle processes.

Required qualifications

• 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline.
• 2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management.
• Strong understanding of the Non-Human Identity security lifecycle.
• Strong understanding of different NHI types including service and application accounts, workload and machine identities, API identities, service principals, access tokens, SSH keys, certificates, secr
• Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms.
• Strong understanding of AWS, Azure, and/or GCP identity and access management.
• Understanding of DevOps and CI/CD environments including GitHub/GitLab, Jenkins, Terraform, Kubernetes, containers, and other automation platforms.
• Strong understanding of secrets management and credential security.
• Experience analyzing identity relationships and access paths.
• Strong understanding of Zero Trust, least privilege, identity security, and defense-in-depth principles.
• Experience integrating security and identity platforms with SIEM, SOAR, ITSM, PAM, IAM, CSPM, CIEM, and DevSecOps tools.
• Strong analytical and problem-solving skills.

Nice to have

• Exposure to NHIM platforms like Oasis Security, Clutch Security, Entro Security.
• Experience implementing or operating an NHI security program within a large enterprise environment.
• Experience with CyberArk, Delinea, or BeyondTrust.
• Experience with cloud-native identity technologies such as AWS IAM Roles, Azure Managed Identities, GCP Workload Identity, or Kubernetes Service Accounts.
• Experience with HashiCorp Vault or other enterprise secrets-management platforms.
• Experience with OAuth 2.0, OpenID Connect, SAML, JWTs, API authentication, PKI, certificates, and SSH.
• Familiarity with NHI attack paths, identity-based attack techniques, credential theft, secret leakage, and machine-to-machine authentication risks.
• Experience with scripting and automation using Python, PowerShell, REST APIs, or similar technologies.
• Experience creating NHI risk models, security metrics, dashboards, and executive reporting.
• Relevant certifications such as CISSP, CCSP, Security+, cloud security certifications, or IAM/PAM certifications.

Benefits

• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA.
• Group Dental Insurance.
• 12 corporate holidays.
• Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

About the company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. It serves as a trusted advisor to more than 6,200 customers.