ABOUT US:
As a world leading provider of integrated solutions for the alternative investment industry, Alter Domus (meaning “The Other House” in Latin) is proud to be home to 90% of the top 30 asset managers in the private markets, and more than 6,000 professionals across 24 jurisdictions.
With a deep understanding of what it takes to succeed in alternatives, we believe in being different - in what we do, in how we work and most importantly in how we enable and develop our people. Invest yourself in the alternative, and join an organization where you progress on merit, where you can speak openly with whoever you are speaking to, and where you will be supported along whichever path you choose to take.
Find out more about life at Alter Domus at careers.alterdomus.com
The Team Lead – IAM Operations is a senior operational leader responsible for the day-to-day delivery, quality and continuity of alterDomus' Identity and Access Management services. This role deputizes for the User Access Manager and ensures that BAU operations across SailPoint, Okta/Auth0 and CyberArk run smoothly, consistently and within SLA across all shifts.
Working across a cross-skilled team of Shift Leads and Access Management Analysts, the Team Lead will own process governance, quality assurance and cross-skilling for the three IAM pillars: Identity Governance (SailPoint IdentityNow), Customer Identity (Okta / Auth0), and Privileged Access (CyberArk PAM, EPM & WPM). The role operates within alterDomus' broader Cyber Resiliency Programme and reports directly to the User Access Manager.
Your responsibilities:
Team & Shift Operations Leadership
Deputize for the User Access Manager and own day-to-day BAU operations across Shift A, B and C.
Own the team's SOPs, runbooks and knowledge base across SailPoint, Okta/Auth0 and CyberArk.
Run quality assurance: audit tickets, review SLA breaches and lead root-cause analysis.
Own the cross-skilling training calendar and track platform certification progress for each Shift Lead and Analyst.
Consolidate shift handover reports into a daily/weekly operations dashboard for the User Access Manager.
Identity Governance & Administration — SailPoint IdentityNow / Identity Security Cloud
Coordinate quarterly access certification and recertification campaigns across production, UAT and sandbox environments.
Support Separation of Duties (SoD) policy enforcement and audit evidence generation.
Escalate and coordinate resolution of complex connector, RBAC or lifecycle workflow issues with the platform engineering team.
Customer & Workforce Identity — Okta / Auth0
Coordinate resolution of escalated SSO federation (SAML/OIDC), MFA and B2B/B2C authentication issues.
Support application teams during onboarding of new integrations, ensuring secure token flows and API security standards are followed.
Privileged Access Management — CyberArk PAM, EPM & WPM
Coordinate operational reviews of vault health, session recording policy and just-in-time (JIT) provisioning workflows.
Support scheduling and tracking of privilege entitlement reviews and attestation cycles.
Risk, Compliance & Audit
Support the User Access Manager in preparing audit evidence for internal and external assessments (DORA, GDPR, SOX, ISO 27001).
Maintain and update the IAM risk register; track remediation actions to agreed timelines.
Your profile:
7+ years of experience in Identity & Access Management, Information Security, or a related discipline.
Hands-on operational experience across SailPoint, Okta/Auth0 and CyberArk (or comparable IAM/PAM/CIAM platforms).
Experience owning SOPs, runbooks and knowledge management within a 24x5 or shift-based operations environment.
Familiarity with identity protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP/AD.
Working knowledge of regulatory frameworks relevant to financial services: SOC 1 & 2, ISO 27001.
Prior experience in a team-lead, QA, or senior analyst capacity within IAM or security operations.
Nice to Have
Platform certifications (SailPoint, CyberArk Certified Trustee/Defender, Okta/Auth0).
Exposure to cloud IAM in Azure AD / Entra ID, AWS IAM, or GCP IAM.
Familiarity with NIST CSF 2.0.
Your AD Key Relationships
User Access Manager
Shift Leads and Access Management Analysts
Access management engineering team
WHAT WE OFFER
We are committed to supporting your development, advancing your career, and providing benefits that matter to you.
Our industry-leading Alter Domus Academy offers six learning zones for every stage of your career, with resources tailored to your ambitions and resources from LinkedIn Learning.
Our global benefits also include:
Alter Domus is an Equal Opportunity Employer: Equity Statement
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.
(Alter Domus Privacy notice can be reviewed via Alter Domus webpage: https://alterdomus.com/privacy-notice/)
#LI-HYBRID
#LI-TC1
Enabling your growth in alternative investments through end-to-end expertise and technology.
Driven by a deep understanding of what it takes to succeed in the alternatives market, Alter Domus have developed an unmatched offering to meet and anticipate the ever-changing needs of investment managers and asset owners worldwide. Everything we do is sharply focused on mitigating risks, reducing costs, creating efficiencies, and ultimately driving growth.
It starts with the expertise of our people; experienced in every aspect of alternative investments, across multiple geographies and jurisdictions, we know first-hand the technical complexities and operational challenges you face and importantly how to overcome them to drive growth.
And when it comes to technology, whether we’re enabling operational efficiencies, providing intuitive platforms to manage products, or offering the latest data and analytics solutions to enhance decision-making, we turn what some see as facts, figures, or data points into competitive advantage for some of the biggest names in alternatives.
