Cyber Identity Administrator

Department: Innovation and Technology Department
Salary: $73,675.00 - $105,906.94 Commensurate with Experience

Welcome to the City of Charlotte

Charlotte is America’s Queen City, opening her arms to a diverse and inclusive community of residents, businesses and visitors alike. Here you will find a safe, family-oriented city where people work together to help everyone thrive. The mission of the City of Charlotte is to deliver quality public services and promote the safety, health, and quality of life for all residents.

Our guiding principles include:

- Attracting and retaining a skilled and diverse workforce
- Valuing teamwork, openness, accountability, productivity, and employee development
- Providing all customers with courteous, responsive, accessible, and seamless quality services
- Taking initiative to identify, analyze, and solve problems
- Collaborating with stakeholders to make informed decisions

SUMMARY
The Innovation and Technology department for the City of Charlotte is currently recruiting for a Cyber Identity Administrator. This role helps protect access to critical municipal systems by administering and supporting the City’s identity and access management environment.
This position supports Active Directory, Microsoft Entra, and Okta in partnership with senior engineers, helping ensure secure access, regulatory compliance, and reliable service. Responsibilities include account and access administration, responding to identity related tickets and alerts, supporting audits and access reviews, and building automation. This role works closely with Cyber Protection and other IT teams, and offers a clear path to grow into advanced identity engineering.

Major Duties and Responsibilities:

- Administer user accounts, groups, and access in Active Directory, Microsoft Entra ID, and Okta, including creating, changing, disabling, and removing accounts.
- Carry out identity lifecycle tasks such as onboarding, offboarding, and role-based access changes, and help improve the procedures behind them.
- Support day to day Active Directory operations, including group and OU management, account troubleshooting, and domain health checks.
- Onboard and troubleshoot Single Sign-On (SSO) applications using SAML, OAuth, OpenID Connect, and SCIM, with support from senior engineers on complex integrations.
- Troubleshoot Microsoft Entra App Registrations, Enterprise Applications, and Conditional Access issues, escalating complex cases to senior engineers.
- Support access governance practices that align with Zero Trust principles.
- Build and maintain automation for IAM processes using PowerShell and Okta Workflows, with code review from senior team members.
- Manage and troubleshoot Group Policy Objects (GPOs), test changes, and help apply configuration standards.
- Support the hybrid Active Directory and Entra ID environment, including monitoring directory synchronization and resolving sync issues.
- Process certificate requests, renewals, and revocations, and track certificate expiration dates.
- Monitor identity systems, review logs and alerts, and troubleshoot identity related incidents, escalating as needed.
- Perform regular access reviews and audits, and follow up on fixes to support CJIS, NIST, PCI, and other compliance requirements.
- Support testing and validation of Active Directory backup and recovery processes.
- Support IT and cybersecurity projects, including tasks that address audit findings and security gaps.
- Create and update documentation, knowledge articles, and process guides for identity systems.
- Serve as an escalation point for the Service Desk and provide guidance to IT staff on access requests and identity questions.
- Perform other related duties as assigned.

Knowledge, Skills & Abilities:

- Good communication skills and the ability to work with cross-functional technical teams.
- Solid working knowledge of Active Directory, including users, groups, organizational units, and domain structure.
- Working knowledge of Windows Server administration, including basic configuration and patching.
- Working knowledge of Group Policy, including how settings are applied and how to troubleshoot them.
- Working knowledge of DNS and how it supports Active Directory.
- Working knowledge of Microsoft Entra ID (Azure AD), including users, groups, and Conditional Access.
- Working knowledge of Okta administration, including users, groups, application assignments, and lifecycle management.
- Scripting experience with PowerShell, Python, or similar languages, and interest in growing IAM automation skills.
- Understanding of identity lifecycle management and role-based access control (RBAC) concepts.
- Awareness of Zero Trust concepts and modern identity security.
- Basic understanding of PKI and digital certificates.
- Understanding of SSO protocols such as SAML, OAuth, and OpenID Connect.
- Awareness of MFA methods such as TOTP, WebAuthn, and FIDO2.
- Ability to analyze logs and take part in incident response for identity systems.
- Awareness of cybersecurity frameworks and compliance standards such as CJIS, NIST, and HIPAA.
- Strong analytical, troubleshooting, and problem-solving skills, with a willingness to learn and accept feedback.
- Ability to document work clearly for both technical and non-technical audiences.

Minimum Qualifications:

- High school graduate or equivalent and seven (7) years relevant experience.
- Or
- 2 Year College Degree in Computer Science, Information Security, Information Systems, or a related field and five (5) years of related work experience.
- OR
- Bachelor's Level Degree in Computer Science, Information Security, Information Systems, or a related field and three (3) year of related work experience.
- OR
- Master's Level Degree in Computer Science, Information Security, Information Systems, or a related field and one (1) years of related work experience
- OR an equivalent combination of education and relevant experience that provides the necessary knowledge, skills, and abilities to successfully perform the essential job duties.

Preferred Qualifications:

- Security+ or a similar cybersecurity certification.
- Microsoft Identity and Access Administrator Associate certification, or a Microsoft Azure or 365 fundamentals certification.
- Okta Certified Professional or Administrator certification.
- 2+ years of experience in Identity and Access Management, systems administration, or Tier 2 service desk support.
- Hands-on experience administering Active Directory in a work environment.
- Experience with Okta or Microsoft Entra ID administration.
- Experience writing PowerShell scripts to automate tasks.
- Experience working in regulated environments (CJIS, NIST, PCI, HIPAA).
- Experience supporting IT projects or taking part in audits.

CONDITIONS OF EMPLOYMENT

The City’s Background Check Policy requires background checks to be conducted on final internal or external candidate(s) applying for any position with the City of Charlotte. The type of information that will be collected as part of a background check includes, but is not limited to: reference checks, social security verification, education verification, criminal conviction record check, and, if applicable, a credit history check, sex offender registry and motor vehicle records check.

Background checks must be in compliance with all federal and state statutes, such as the Fair Credit Reporting Act (FCRA). The checks must be consistent with the guidelines set forth by these laws requiring organizations to obtain a candidate’s written authorization before obtaining a criminal background report, motor vehicle records check or credit report; and to properly store and dispose of information derived from such reports.

Final candidates must pass a pre-employment drug-screening test and physical examination. During the selection process, candidates may be asked to take a skills test, and/or participate in other assessments.

The City of Charlotte is an Equal Opportunity Employer and does not unlawfully discriminate on the basis of race, religion, color, sex, national origin, marital status, age, disability, sexual orientation, political affiliation or on the basis of actual or perceived gender as expressed through dress, appearance, or behavior.

Our culture is to serve the community honorably.

HOW TO APPLY

Apply online.

Federal law requires employers to provide reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job.

You are welcome to visit the City of Charlotte Human Resources Department lobby, where self-service application kiosks are available. They are located in our office at 700 East 4th Street, Suite 200, Charlotte, NC 28202. We are open Monday through Friday, from 9:30 a.m. to 3:30 p.m. (EST), excluding official City holidays.

For questions about your application or the hiring process, please email [email protected] .

The City of Charlotte is committed to making our services and programs accessible to all. Upon request, auxiliary aids, written materials in alternate formats, language access, and other reasonable accommodations or modifications will be provided. To make a request, please fill out the Innovation & Technology ADA request form or call 704.336.4120.

BENEFITS

The City of Charlotte provides a comprehensive benefits package to eligible employees.

Click   here   to learn more about the City of Charlotte’s benefits.

The City of Charlotte is a drug and alcohol-free workplace.