Partner with IAM on SSO, provisioning, joiner/mover/leaver changes and access for Windows, Mac and mobile users; support integrations with Slack and enterprise applications.
Build practical automation using Google Workspace APIs, Apps Script, Python, GAM or similar tools for administration, reporting and account lifecycle tasks.
Security, compliance and technical leadership
Configure and maintain security controls for administrative access, MFA/SSO integrations, data loss prevention, external sharing, OAuth app access and audit logging.
Administer Google Vault retention and holds with Legal and Compliance, and provide technical evidence for audits and access reviews.
Support the Principal Architect and AI platform owners on secure Gemini Enterprise access to Workspace data; own Workspace configuration.
Coach support engineers, document standards, and work with Google or vendors on complex production issues.
What we’re looking for
7+ years in IT infrastructure or collaboration engineering, including 3+ years administering Google Workspace in a production enterprise environment.
Deep hands-on knowledge of Gmail, Drive/Shared Drives, Calendar, Meet, Groups, and the Google Workspace Admin Console.
Strong knowledge of mail flow, DNS, and authentication standards (SPF, DKIM, DMARC), permissions, and shared data governance.
Experience with SSO, IAM integrations, Google Vault, audit logging, and security controls across Workspace.
Ability to troubleshoot complex migrations, production incidents, integration issues, and employee-impacting problems.
Useful scripting or API experience and the discipline to document, test, and safely deploy changes.
Helpful experience
Experience with Microsoft 365-to-Google Workspace migrations, Google Meet transition or coexistence.
Google Workspace administration certification or experience supporting SOC 2/ISO 27001 audit requirements.
Experience integrating Workspace with Okta or another enterprise identity provider.
Initial priorities: Support the final migration waves and hypercare, establish sustainable in-house Workspace operations, and close dependencies for Microsoft mail and file-service retirement.
