Job Description:
• Administer Google Workspace users, groups, organizational units, aliases, Gmail, Drive, shared drives, Calendar, Meet, and Groups settings
• Enforce Google Workspace security policies, including 2-step verification, app access controls, third-party OAuth review, and device management
• Monitor admin audit and login reports, investigate suspicious activity, and respond to phishing reports
• Manage license assignment, storage usage, data retention, exports, and account transfers for departures
• Maintain employee records, organizational structure, and role-based permissions in Rippling
• Build and run onboarding and offboarding workflows, including application provisioning and de-provisioning
• Administer application management and SSO connections for third-party tools
• Support device inventory, enrollment, and MDM policies through Rippling
• Partner with HR and Finance on employee lifecycle changes, reporting, and application spend visibility
• Build and maintain an inventory of applications, systems, and data stores
• Help define an RBAC model mapping job roles and departments to standardized permission sets
• Consolidate authentication behind SSO where possible and document integration exceptions
• Implement automated provisioning and de-provisioning across the employee lifecycle
• Build recurring access review workflows and produce completion evidence
• Instrument logging and alerting for privileged access, permission changes, and anomalous sign-ins
• Document access policies, request and approval paths, and break-glass procedures in Notion
• Track and report access-control progress and provisioning metrics
• Provide first-line support for hardware, software, account, and access requests
• Track, prioritize, resolve, and escalate IT tickets within agreed response targets
• Prepare, image, ship, and recover laptops and peripherals for a distributed workforce
• Maintain accurate asset inventory and license records
• Write and maintain internal documentation, how-to guides, and IT onboarding materials in Notion
• Support conference room A/V, VPNs, printers, and other office technology as needed
• Apply least-privilege access principles
• Run periodic access reviews and confirm timely removal of departed users
• Assist with security awareness reminders and incident response tasks
• Follow documented change and approval procedures
• Deliver 30-, 60-, and 90-day objectives, including independent ticket handling, documented lifecycle workflows, RBAC mapping, access review, inventory cleanup, IT documentation, and application/access inventory
Requirements:
• 1–3 years of experience in IT support, helpdesk, or systems administration
• Hands-on experience administering Google Workspace, including users, groups, security settings, and the admin console
• Experience with an HRIS or IT lifecycle platform; Rippling strongly preferred, with Gusto, Justworks, BambooHR, Okta, or JumpCloud experience considered
• Working knowledge of macOS and Windows support
• Basic networking knowledge, including DNS, DHCP, VPN, and Wi-Fi
• Comfort with SaaS application administration, SSO, and role-based permission models
• Genuine interest in identity and access management
• Clear written and verbal communication, with ability to explain technical topics to non-technical staff
• Strong organizational habits
• Discretion with confidential data
• Bias toward documentation
• Google Workspace Administrator certification or CompTIA A+ / Network+ preferred
• Experience supporting a fully remote or hybrid workforce preferred
• Familiarity with MDM tooling, endpoint security, or device compliance programs preferred
• Basic scripting or automation experience, such as Apps Script or Python, and comfort working with app APIs or SCIM provisioning preferred
• Exposure to IAM tooling such as Okta, JumpCloud, or Entra ID, or to SOC 2/access review and audit processes preferred
• Exposure to Slack, Zoom, Notion, Salesforce, or Atlassian administration preferred
Benefits:
• Contract employment
• Remote work
• Reports to technology leadership