Cyber Identity Administrator

City of Charlotte•Charlotte, NC

About The Position

The City of Charlotte’s Innovation and Technology Department is recruiting a Cyber Identity Administrator to help protect access to critical municipal systems by administering and supporting the City’s identity and access management environment. The role supports Active Directory, Microsoft Entra ID, and Okta in partnership with senior engineers to help ensure secure access, regulatory compliance, and reliable service. It includes account and access administration, responding to identity-related tickets and alerts, supporting audits and access reviews, and building automation. The position works closely with Cyber Protection and other IT teams and offers a path to develop into advanced identity engineering. The role administers identity systems and lifecycle processes, supports directory and application integrations, troubleshoots access issues, and contributes to monitoring, audits, documentation, projects, and recovery testing. It also serves as an escalation point for the Service Desk and provides guidance to IT staff on access requests and identity questions. Final candidates must pass a pre-employment drug-screening test and physical examination; candidates may also be asked to complete a skills test or other assessments.

Requirements

High school graduate or equivalent and seven years of relevant experience; or a two-year college degree in Computer Science, Information Security, Information Systems, or a related field and five years of related work experience; or a bachelor’s degree in one of those fields and three years of related work experience; or a master’s degree in one of those fields and one year of related work experience; or an equivalent combination of education and relevant experience.
Good communication skills and ability to work with cross-functional technical teams.
Solid working knowledge of Active Directory users, groups, organizational units, and domain structure.
Working knowledge of Windows Server administration, including basic configuration and patching.
Working knowledge of Group Policy, how settings are applied, and how to troubleshoot them.
Working knowledge of DNS and its support of Active Directory.
Working knowledge of Microsoft Entra ID (Azure AD), including users, groups, and Conditional Access.
Working knowledge of Okta administration, including users, groups, application assignments, and lifecycle management.
Scripting experience with PowerShell, Python, or similar languages, and interest in developing IAM automation skills.
Understanding of identity lifecycle management and role-based access control concepts.
Awareness of Zero Trust concepts and modern identity security.
Basic understanding of PKI and digital certificates.
Understanding of SSO protocols such as SAML, OAuth, and OpenID Connect.
Awareness of MFA methods such as TOTP, WebAuthn, and FIDO2.
Ability to analyze logs and participate in incident response for identity systems.
Awareness of cybersecurity frameworks and compliance standards such as CJIS, NIST, and HIPAA.
Strong analytical, troubleshooting, and problem-solving skills, with willingness to learn and accept feedback.
Ability to document work clearly for technical and non-technical audiences.
Final candidates must pass a pre-employment drug-screening test and physical examination; candidates may be asked to complete a skills test or other assessments.

Nice To Haves

Security+ or similar cybersecurity certification.
Microsoft Identity and Access Administrator Associate certification, or a Microsoft Azure or 365 fundamentals certification.
Okta Certified Professional or Administrator certification.
Two or more years of experience in Identity and Access Management, systems administration, or Tier 2 service desk support.
Hands-on experience administering Active Directory in a work environment.
Experience with Okta or Microsoft Entra ID administration.
Experience writing PowerShell scripts to automate tasks.
Experience working in regulated environments such as CJIS, NIST, PCI, or HIPAA.
Experience supporting IT projects or participating in audits.

Responsibilities

Administer user accounts, groups, and access in Active Directory, Microsoft Entra ID, and Okta, including creating, changing, disabling, and removing accounts.
Carry out onboarding, offboarding, and role-based access changes, and help improve related procedures.
Support day-to-day Active Directory operations, including group and OU management, account troubleshooting, and domain health checks.
Onboard and troubleshoot SSO applications using SAML, OAuth, OpenID Connect, and SCIM, with senior-engineer support for complex integrations.
Troubleshoot Microsoft Entra App Registrations, Enterprise Applications, and Conditional Access issues, escalating complex cases to senior engineers.
Support access governance practices aligned with Zero Trust principles.
Build and maintain IAM process automation using PowerShell and Okta Workflows, with code review from senior team members.
Manage and troubleshoot Group Policy Objects, test changes, and help apply configuration standards.
Support the hybrid Active Directory and Entra ID environment, including monitoring directory synchronization and resolving sync issues.
Process certificate requests, renewals, and revocations, and track certificate expiration dates.
Monitor identity systems, review logs and alerts, and troubleshoot identity-related incidents, escalating as needed.
Perform regular access reviews and audits, and follow up on fixes to support CJIS, NIST, PCI, and other compliance requirements.
Support testing and validation of Active Directory backup and recovery processes.
Support IT and cybersecurity projects, including tasks addressing audit findings and security gaps.
Create and update documentation, knowledge articles, and process guides for identity systems.
Serve as an escalation point for the Service Desk and guide IT staff on access requests and identity questions.
Perform other related duties as assigned.