Team Lead (Access Management Ops)

About Us

As a world leading provider of integrated solutions for the alternative investment industry, Alter Domus (meaning The Other House in Latin) is proud to be home to 90% of the top 30 asset managers in the private markets, and more than 6,000 professionals across 24 jurisdictions.

With a deep understanding of what it takes to succeed in alternatives, we believe in being different - in what we do, in how we work and most importantly in how we enable and develop our people. Invest yourself in the alternative, and join an organization where you progress on merit, where you can speak openly with whoever you are speaking to, and where you will be supported along whichever path you choose to take.

Find out more about life at Alter Domus at careers.alterdomus.com

The Team Lead – IAM Operations is a senior operational leader responsible for the day-to-day delivery, quality and continuity of alterDomus Identity and Access Management services. This role deputizes for the User Access Manager and ensures that BAU operations across SailPoint, Okta/Auth0 and CyberArk run smoothly, consistently and within SLA across all shifts.

Working across a cross-skilled team of Shift Leads and Access Management Analysts, the Team Lead will own process governance, quality assurance and cross-skilling for the three IAM pillars: Identity Governance (SailPoint IdentityNow), Customer Identity (Okta / Auth0), and Privileged Access (CyberArk PAM, EPM & WPM). The role operates within alterDomus broader Cyber Resiliency Programme and reports directly to the User Access Manager.

Your Responsibilities

Team & Shift Operations Leadership

• Deputize for the User Access Manager and own day-to-day BAU operations across Shift A, B and C.
• Own the team's SOPs, runbooks and knowledge base across SailPoint, Okta/Auth0 and CyberArk.
• Run quality assurance: audit tickets, review SLA breaches and lead root-cause analysis.
• Own the cross-skilling training calendar and track platform certification progress for each Shift Lead and Analyst.
• Consolidate shift handover reports into a daily/weekly operations dashboard for the User Access Manager.
  
  

Identity Governance & Administration — SailPoint IdentityNow / Identity Security Cloud

• Coordinate quarterly access certification and recertification campaigns across production, UAT and sandbox environments.
• Support Separation of Duties (SoD) policy enforcement and audit evidence generation.
• Escalate and coordinate resolution of complex connector, RBAC or lifecycle workflow issues with the platform engineering team.
  
  

Customer & Workforce Identity — Okta / Auth0

• Coordinate resolution of escalated SSO federation (SAML/OIDC), MFA and B2B/B2C authentication issues.
• Support application teams during onboarding of new integrations, ensuring secure token flows and API security standards are followed.
  
  

Privileged Access Management — CyberArk PAM, EPM & WPM

• Coordinate operational reviews of vault health, session recording policy and just-in-time (JIT) provisioning workflows.
• Support scheduling and tracking of privilege entitlement reviews and attestation cycles.
  
  

Risk, Compliance & Audit

• Support the User Access Manager in preparing audit evidence for internal and external assessments (DORA, GDPR, SOX, ISO 27001).
• Maintain and update the IAM risk register; track remediation actions to agreed timelines.
  
  

Your Profile

• 7+ years of experience in Identity & Access Management, Information Security, or a related discipline.
• Hands-on operational experience across SailPoint, Okta/Auth0 and CyberArk (or comparable IAM/PAM/CIAM platforms).
• Experience owning SOPs, runbooks and knowledge management within a 24x5 or shift-based operations environment.
• Familiarity with identity protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP/AD.
• Working knowledge of regulatory frameworks relevant to financial services: SOC 1 & 2, ISO 27001.
• Prior experience in a team-lead, QA, or senior analyst capacity within IAM or security operations.
  
  

Nice to Have

• Platform certifications (SailPoint, CyberArk Certified Trustee/Defender, Okta/Auth0).
• Exposure to cloud IAM in Azure AD / Entra ID, AWS IAM, or GCP IAM.
• Familiarity with NIST CSF 2.0.
  
  

Your AD Key Relationships

• User Access Manager
• Shift Leads and Access Management Analysts
• Access management engineering team
  
  

What We Offer

We are committed to supporting your development, advancing your career, and providing benefits that matter to you.

Our industry-leading Alter Domus Academy offers six learning zones for every stage of your career, with resources tailored to your ambitions and resources from LinkedIn Learning.

Our Global Benefits Also Include

• Support for professional accreditations such as ACCA and study leave
• Flexible arrangements, generous holidays, plus an additional day off for your birthday!
• Continuous mentoring along your career progression
• Active sports, events and social committees across our offices
• 24/7 support available from our Employee Assistance Program
• The opportunity to invest in our growth and success through our Employee Share Plan
• Plus additional local benefits depending on your location
  
  

Alter Domus is an Equal Opportunity Employer: Equity Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.

(Alter Domus Privacy notice can be reviewed via Alter Domus webpage: https://alterdomus.com/privacy-notice/)