Team Lead (Access Management Ops)

The Team Lead – IAM Operations is a senior operational leader responsible for the day-to-day delivery, quality and continuity of alterDomus' Identity and Access Management services. This role deputizes for the User Access Manager and ensures that BAU operations across SailPoint, Okta/Auth0 and CyberArk run smoothly, consistently and within SLA across all shifts.

Working across a cross-skilled team of Shift Leads and Access Management Analysts, the Team Lead will own process governance, quality assurance and cross-skilling for the three IAM pillars: Identity Governance (SailPoint IdentityNow), Customer Identity (Okta / Auth0), and Privileged Access (CyberArk PAM, EPM & WPM). The role operates within alterDomus' broader Cyber Resiliency Programme and reports directly to the User Access Manager.

Your responsibilities:

Team & Shift Operations Leadership

• Deputize for the User Access Manager and own day-to-day BAU operations across Shift A, B and C.

• Own the team's SOPs, runbooks and knowledge base across SailPoint, Okta/Auth0 and CyberArk.

• Run quality assurance: audit tickets, review SLA breaches and lead root-cause analysis.

• Own the cross-skilling training calendar and track platform certification progress for each Shift Lead and Analyst.

• Consolidate shift handover reports into a daily/weekly operations dashboard for the User Access Manager.

Identity Governance & Administration — SailPoint IdentityNow / Identity Security Cloud

• Coordinate quarterly access certification and recertification campaigns across production, UAT and sandbox environments.

• Support Separation of Duties (SoD) policy enforcement and audit evidence generation.

• Escalate and coordinate resolution of complex connector, RBAC or lifecycle workflow issues with the platform engineering team.

Customer & Workforce Identity — Okta / Auth0

• Coordinate resolution of escalated SSO federation (SAML/OIDC), MFA and B2B/B2C authentication issues.

• Support application teams during onboarding of new integrations, ensuring secure token flows and API security standards are followed.

Privileged Access Management — CyberArk PAM, EPM & WPM

• Coordinate operational reviews of vault health, session recording policy and just-in-time (JIT) provisioning workflows.

• Support scheduling and tracking of privilege entitlement reviews and attestation cycles.

Risk, Compliance & Audit

• Support the User Access Manager in preparing audit evidence for internal and external assessments (DORA, GDPR, SOX, ISO 27001).

• Maintain and update the IAM risk register; track remediation actions to agreed timelines.

Your profile:

• 7+ years of experience in Identity & Access Management, Information Security, or a related discipline.

• Hands-on operational experience across SailPoint, Okta/Auth0 and CyberArk (or comparable IAM/PAM/CIAM platforms).

• Experience owning SOPs, runbooks and knowledge management within a 24x5 or shift-based operations environment.

• Familiarity with identity protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP/AD.

• Working knowledge of regulatory frameworks relevant to financial services: SOC 1 & 2, ISO 27001.

• Prior experience in a team-lead, QA, or senior analyst capacity within IAM or security operations.

Nice to Have

• Platform certifications (SailPoint, CyberArk Certified Trustee/Defender, Okta/Auth0).

• Exposure to cloud IAM in Azure AD / Entra ID, AWS IAM, or GCP IAM.

• Familiarity with NIST CSF 2.0.

Your AD Key Relationships

• User Access Manager

• Shift Leads and Access Management Analysts

• Access management engineering team