Cyber Identity Administrator

City of Charlotte•Charlotte, NC

8d•$73,675 - $105,907

About The Position

The City of Charlotte’s Innovation and Technology Department is hiring a Cyber Identity Administrator to administer and support the City’s identity and access management environment. The role helps protect access to critical municipal systems and supports Active Directory, Microsoft Entra ID, and Okta in partnership with senior engineers. It contributes to secure access, regulatory compliance, and reliable service, and offers a path to grow into advanced identity engineering. The administrator works closely with Cyber Protection and other IT teams. The role includes account and access administration, responding to identity-related tickets and alerts, supporting audits and access reviews, building automation, and performing related duties as assigned. Eligible employees receive access to the City’s comprehensive benefits package.

Requirements

Good communication skills and the ability to work with cross-functional technical teams.
Solid working knowledge of Active Directory, including users, groups, organizational units, and domain structure.
Working knowledge of Windows Server administration, including basic configuration and patching.
Working knowledge of Group Policy, including how settings are applied and how to troubleshoot them.
Working knowledge of DNS and how it supports Active Directory.
Working knowledge of Microsoft Entra ID (Azure AD), including users, groups, and Conditional Access.
Working knowledge of Okta administration, including users, groups, application assignments, and lifecycle management.
Scripting experience with PowerShell, Python, or similar languages, and interest in developing IAM automation skills.
Understanding of identity lifecycle management and role-based access control concepts.
Awareness of Zero Trust concepts and modern identity security.
Basic understanding of PKI and digital certificates.
Understanding of SSO protocols such as SAML, OAuth, and OpenID Connect.
Awareness of MFA methods such as TOTP, WebAuthn, and FIDO2.
Ability to analyze logs and take part in incident response for identity systems.
Awareness of cybersecurity frameworks and compliance standards such as CJIS, NIST, and HIPAA.
Strong analytical, troubleshooting, and problem-solving skills, with a willingness to learn and accept feedback.
Ability to document work clearly for technical and non-technical audiences.
High school graduate or equivalent and seven years of relevant experience; or a two-year college degree in Computer Science, Information Security, Information Systems, or a related field and five years of related work experience; or a bachelor’s degree in one of those fields and three years of related work experience; or a master’s degree in one of those fields and one year of related work experience; or an equivalent combination of education and relevant experience.
Final candidates must pass a pre-employment drug-screening test and physical examination. Candidates may be asked to take a skills test and/or participate in other assessments.

Nice To Haves

Security+ or a similar cybersecurity certification.
Microsoft Identity and Access Administrator Associate certification, or a Microsoft Azure or 365 fundamentals certification.
Okta Certified Professional or Administrator certification.
Two or more years of experience in Identity and Access Management, systems administration, or Tier 2 service desk support.
Hands-on experience administering Active Directory in a work environment.
Experience with Okta or Microsoft Entra ID administration.
Experience writing PowerShell scripts to automate tasks.
Experience working in regulated environments such as CJIS, NIST, PCI, or HIPAA.
Experience supporting IT projects or participating in audits.

Responsibilities

Administer user accounts, groups, and access in Active Directory, Microsoft Entra ID, and Okta, including creating, changing, disabling, and removing accounts.
Carry out identity lifecycle tasks such as onboarding, offboarding, and role-based access changes, and help improve related procedures.
Support day-to-day Active Directory operations, including group and OU management, account troubleshooting, and domain health checks.
Onboard and troubleshoot Single Sign-On applications using SAML, OAuth, OpenID Connect, and SCIM, with senior engineer support for complex integrations.
Troubleshoot Microsoft Entra App Registrations, Enterprise Applications, and Conditional Access issues, escalating complex cases to senior engineers.
Support access governance practices aligned with Zero Trust principles.
Build and maintain IAM automation using PowerShell and Okta Workflows, with code review from senior team members.
Manage and troubleshoot Group Policy Objects, test changes, and help apply configuration standards.
Support the hybrid Active Directory and Entra ID environment, including monitoring directory synchronization and resolving synchronization issues.
Process certificate requests, renewals, and revocations, and track certificate expiration dates.
Monitor identity systems, review logs and alerts, and troubleshoot identity-related incidents, escalating as needed.
Perform regular access reviews and audits, and follow up on fixes to support CJIS, NIST, PCI, and other compliance requirements.
Support testing and validation of Active Directory backup and recovery processes.
Support IT and cybersecurity projects, including tasks addressing audit findings and security gaps.
Create and update documentation, knowledge articles, and process guides for identity systems.
Serve as an escalation point for the Service Desk and guide IT staff on access requests and identity questions.
Perform other related duties as assigned.