Cyber Identity Administrator

$94,029-$146,921 Commensurate with experience Summary The Innovation and Technology department for the City of Charlotte is currently recruiting an Identity and Access Management (IAM) administrator. This role is responsible for safeguarding access to critical municipal systems through the design, administration, and continuous improvement of the City’s identity and access management ecosystem. The position leads the integration of hybrid identity technologies across Active Directory, Microsoft Entra, and Okta, ensuring secure access, regulatory compliance, and operational resilience. Essential Duties & Responsibilities Design, implement, and manage enterprise identity and access management (IAM) solutions across Active Directory, Microsoft Entra ID, and Okta. Build, manage, and maintain Active Directory environments, including domain services, replication, and server roles. Administer identity lifecycle processes including provisioning, deprovisioning, and role‑based access controls across hybrid environments. Deploy and integrate Single Sign‑On (SSO) solutions between identity providers and SaaS and cloud applications using SAML, OAuth, OpenID Connect, and SCIM. Configure and troubleshoot Microsoft Entra App Registrations, Enterprise Applications, Conditional Access Policies, and RBAC models. Design and enforce enterprise access governance aligned with Zero Trust principles. Develop and maintain automation for IAM processes using PowerShell, Okta Workflows, and other scripting tools. Manage Group Policy Objects (GPOs) and enforce configuration standards across the enterprise. Administer and support hybrid AD and Azure AD environments including directory synchronization and identity federation. Deploy and maintain PKI infrastructure including certificate authorities, certificate lifecycle management, SCEP, and NDES integrations. Manage certificate services including issuance, renewal, revocation, and enterprise certificate governance. Monitor identity systems, analyze logs, respond to alerts, and lead troubleshooting and root cause analysis for identity‑related incidents. Perform regular access reviews, audits, and remediation of role‑based policies and permissions to ensure compliance with CJIS, NIST, and other regulatory frameworks. Support Active Directory backup and recovery strategies, including testing and validation of restoration processes. Coordinate and execute IT and cybersecurity projects, including remediation plans for audit findings and security gaps. Develop documentation, standards, and architectural diagrams for IAM systems and processes. Provide guidance and consultation to IT staff and leadership on identity governance, access risk, and automation strategies. Perform other related duties as assigned. Minimum Qualifications Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field or an equivalent combination of education and relevant work experience. 3+ years of experience in Information Technology or Identity and Access Management. Preferred Qualifications or Certifications CISSP, GCIH, or similar cybersecurity certifications. Microsoft Identity and Access Administrator Associate certification. Okta Certified Professional or Administrator certification. 5+ years of experience in Identity and Access Management or related IT roles. Competencies Strong communication skills and ability to work across cross‑functional technical teams. Advanced knowledge of Active Directory architecture, including multi‑domain and multi‑forest environments. Strong knowledge of Windows Server administration, including installation, configuration, patching, and hardening. Strong knowledge of Group Policy design, administration, and troubleshooting. Strong knowledge of DNS and Microsoft DNS configuration and troubleshooting. Strong knowledge of Microsoft Entra ID (Azure AD) including identity governance, conditional access, and hybrid identity. Strong knowledge of Okta administration, including lifecycle management, federation, and workflow automation. Experience with IAM automation using PowerShell, Python, or similar scripting languages. Strong understanding of identity lifecycle management, RBAC, and access governance models. Knowledge of Zero Trust architecture and modern identity security frameworks. Strong knowledge of PKI infrastructure, certificate lifecycle management, and cryptographic best practices. Experience with certificate deployment technologies such as SCEP and NDES. Knowledge of AD backup and recovery tools and processes. Knowledge of hybrid identity synchronization tools and services. Strong understanding of SSO protocols including SAML, OAuth, OpenID Connect, and SCIM. Knowledge of MFA technologies including TOTP, WebAuthN, and FIDO2. Experience with logging, monitoring, and incident response for identity systems. Knowledge of cybersecurity frameworks and compliance standards such as CJIS, NIST, and HIPAA. Ability to design scalable IAM solutions and improve operational efficiency through automation. Strong analytical, troubleshooting, and problem‑solving skills. Ability to document systems, processes, and architecture for both technical and non‑technical audiences. Experience with certificate management and enterprise PKI design. Ability To Meet schedules and deadlines of the work. Work In Office two days per week minimum and as needed in addition. Must be physically located near Charlotte, NC. Working Conditions & Physical Demands This position is relatively free from unpleasant environmental conditions or hazards and is generally sedentary. Incumbents may be required to exert up to 10 pounds of force occasionally, a negligible amount of force frequently, and/or constantly have to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Conditions of Employment The City of Charlotte is an Equal Opportunity Employer and does not unlawfully discriminate on the basis of race, religion, color, sex, national origin, marital status, age, disability, sexual orientation, political affiliation, or on the basis of actual or perceived gender as expressed through dress, appearance, or behavior. The City’s Background Check Policy requires background checks to be conducted on final internal or external candidates applying for any position with the City of Charlotte, in compliance with federal and state statutes. Final candidates must pass a pre‑employment drug‑screening test and physical examination. Benefits The City of Charlotte provides a comprehensive benefits package to eligible employees. For more information, please refer to the City of Charlotte’s benefits information. The City of Charlotte is a drug and alcohol‑free workplace. #J-18808-Ljbffr City of Charlotte