Cyber Identity Administrator

• Location: Charlotte-Mecklenburg Government Center
• Department: Innovation and Technology Department
• Salary: $73,675.00 - $105,906.94 Commensurate with Experience

Welcome to the City of Charlotte

Charlotte is America’s Queen City, opening her arms to a diverse and inclusive community of residents, businesses and visitors alike. Here you will find a safe, family-oriented city where people work together to help everyone thrive. The mission of the City of Charlotte is to deliver quality public services and promote the safety, health, and quality of life for all residents.

Our guiding principles include

• Attracting and retaining a skilled and diverse workforce
• Valuing teamwork, openness, accountability, productivity, and employee development
• Providing all customers with courteous, responsive, accessible, and seamless quality services
• Taking initiative to identify, analyze, and solve problems
• Collaborating with stakeholders to make informed decisions

SUMMARY

The Innovation and Technology department for the City of Charlotte is currently recruiting for a Cyber Identity Administrator. This role helps protect access to critical municipal systems by administering and supporting the City’s identity and access management environment.

This position supports Active Directory, Microsoft Entra, and Okta in partnership with senior engineers, helping ensure secure access, regulatory compliance, and reliable service. Responsibilities include account and access administration, responding to identity related tickets and alerts, supporting audits and access reviews, and building automation. This role works closely with Cyber Protection and other IT teams, and offers a clear path to grow into advanced identity engineering.

Major Duties and Responsibilities

• Administer user accounts, groups, and access in Active Directory, Microsoft Entra ID, and Okta, including creating, changing, disabling, and removing accounts.
• Carry out identity lifecycle tasks such as onboarding, offboarding, and role-based access changes, and help improve the procedures behind them.
• Support day to day Active Directory operations, including group and OU management, account troubleshooting, and domain health checks.
• Onboard and troubleshoot Single Sign-On (SSO) applications using SAML, OAuth, OpenID Connect, and SCIM, with support from senior engineers on complex integrations.
• Troubleshoot Microsoft Entra App Registrations, Enterprise Applications, and Conditional Access issues, escalating complex cases to senior engineers.
• Support access governance practices that align with Zero Trust principles.
• Build and maintain automation for IAM processes using PowerShell and Okta Workflows, with code review from senior team members.
• Manage and troubleshoot Group Policy Objects (GPOs), test changes, and help apply configuration standards.
• Support the hybrid Active Directory and Entra ID environment, including monitoring directory synchronization and resolving sync issues.
• Process certificate requests, renewals, and revocations, and track certificate expiration dates.
• Monitor identity systems, review logs and alerts, and troubleshoot identity related incidents, escalating as needed.
• Perform regular access reviews and audits, and follow up on fixes to support CJIS, NIST, PCI, and other compliance requirements.
• Support testing and validation of Active Directory backup and recovery processes.
• Support IT and cybersecurity projects, including tasks that address audit findings and security gaps.
• Create and update documentation, knowledge articles, and process guides for identity systems.
• Serve as an escalation point for the Service Desk and provide guidance to IT staff on access requests and identity questions.
• Perform other related duties as assigned.

Knowledge, Skills & Abilities

• Good communication skills and the ability to work with cross-functional technical teams.
• Solid working knowledge of Active Directory, including users, groups, organizational units, and domain structure.
• Working knowledge of Windows Server administration, including basic configuration and patching.
• Working knowledge of Group Policy, including how settings are applied and how to troubleshoot them.
• Working knowledge of DNS and how it supports Active Directory.
• Working knowledge of Microsoft Entra ID (Azure AD), including users, groups, and Conditional Access.
• Working knowledge of Okta administration, including users, groups, application assignments, and lifecycle management.
• Scripting experience with PowerShell, Python, or similar languages, and interest in growing IAM automation skills.
• Understanding of identity lifecycle management and role-based access control (RBAC) concepts.
• Awareness of Zero Trust concepts and modern identity security.
• Basic understanding of PKI and digital certificates.
• Understanding of SSO protocols such as SAML, OAuth, and OpenID Connect.
• Awareness of MFA methods such as TOTP, WebAuthn, and FIDO2.
• Ability to analyze logs and take part in incident response for identity systems.
• Awareness of cybersecurity frameworks and compliance standards such as CJIS, NIST, and HIPAA.
• Strong analytical, troubleshooting, and problem-solving skills, with a willingness to learn and accept feedback.
• Ability to document work clearly for both technical and non-technical audiences.