Senior Security Consultant, NHI; Non-Human Identity

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

We are looking for a skilled Senior Security Consultant, NHI to support the discovery, governance, and security of non-human identities — service accounts, application and machine identities, workload identities, secrets, tokens, and certificates — across enterprise, cloud, and Dev Ops environments. This role will engage in the development of NHI discovery and inventory, risk scoring and prioritization, and lifecycle and remediation programs while providing "Wow Them" service to clients and/or internal customers or co-workers.

The Security Analyst, NHI will be required to demonstrate strong identity security, cloud security, and secrets management skills, lead by influence, and strong business/financial acumen to drive the use of progressive non-human identity security and Zero Trust programs that will align the delivery business objectives and priorities.

The Non-Human Identity (NHI) Security practice is responsible for securing the rapidly growing population of machine and workload identities that power modern enterprise, cloud, and automation environments. We discover, classify, govern, monitor, and remediate non-human identities and their credentials across the organization.

Our team of NHI security analysts, identity architects, and consultants focuses on service and application accounts, workload and machine identities, API identities, secrets, tokens, certificates, and cloud-native credentials — applying Zero Trust, least privilege, and secrets management principles with modern NHI platforms such as Oasis Security, Clutch Security, and Entro. We partner with application owners, Dev Ops, cloud engineering, infrastructure, and security teams to reduce credential sprawl, eliminate excessive privilege, and deliver measurable, lasting identity security outcomes.

• Establishing enterprise-wide NHI discovery, inventory, ownership, and lifecycle governance across cloud, on-premises, SaaS, and Dev Ops environments.

• Reducing non-human identity risk through risk scoring, remediation of orphaned, stale, and over-privileged identities, and secrets protection.

• Integrating NHI security with IAM, PAM, CIEM, CSPM, SIEM, and Dev Sec Ops  platforms to secure machine-to-machine and emerging AI agent identities.

• Serve as a senior subject matter expert for Non-Human Identity (NHI) security, including service accounts, application identities, machine identities, workload identities, API identities, secrets, tokens, certificates, and other machine-to-machine credentials.

• Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes across enterprise environments.

• Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities.

• Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles.

• Leverage modern NHI security platforms, preferably Oasis Security, Clutch Security, and Entro, to discover, analyze, monitor, and remediate non-human identities.

• Develop NHI risk scoring and prioritization models based on privileges, exposure, usage, ownership, credential type, business…