Note: The job is a remote job and is open to candidates in USA. Concierge Auctions is a luxury real estate auction company that facilitates market-driven transactions for high-value properties worldwide. The IT Administrator will manage Google Workspace, Rippling, employee accounts, devices, access, onboarding, offboarding, and end-user support while partnering on a company-wide identity and access management initiative.
Responsibilities
- Manage users, groups, organizational units, and aliases in the Google Admin console
- Administer Gmail, Drive, shared drives, Calendar, Meet, and Groups settings
- Enforce security policies: 2-step verification, app access controls, third-party OAuth review, and device management
- Monitor admin audit and login reports; investigate suspicious activity and respond to phishing reports
- Manage license assignment and storage usage; handle data retention, exports, and account transfers on departures
- Maintain employee records, org structure, and role-based permissions in Rippling
- Build and run onboarding and offboarding workflows, including app provisioning and de-provisioning
- Administer app management and SSO connections for third-party tools
- Support device inventory, enrollment, and MDM policies through Rippling
- Partner with HR and Finance on employee lifecycle changes, reporting, and app spend visibility
- Build and maintain a complete inventory of applications, systems, and data stores, including owners, sensitivity, and current access methods
- Help define a role-based access control (RBAC) model that maps job roles and departments to standardized permission sets
- Consolidate authentication behind SSO where possible; document exceptions and plan remediation for systems that cannot integrate
- Implement automated provisioning and de-provisioning so access follows the employee lifecycle (hire, transfer, promote, depart) without manual steps
- Build recurring access review workflows and produce evidence that reviews were completed
- Instrument logging and alerting for privileged access, permission changes, and anomalous sign-ins
- Document access policies, request and approval paths, and break-glass procedures; keep them current in Notion
- Track and report on progress: systems covered, percentage behind SSO, orphaned accounts closed, average time to provision and de-provision
- Serve as first-line support for hardware, software, account, and access requests
- Track, prioritize, and resolve tickets within agreed response targets; escalate when needed
- Prepare, image, ship, and recover laptops and peripherals for a distributed workforce
- Maintain accurate asset inventory and license records
- Write and maintain internal documentation, how-to guides, and IT onboarding materials in Notion
- Support conference room A/V, VPN, printers, and other office technology as needed
- Apply least-privilege access principles across all managed systems
- Run periodic access reviews and confirm timely removal of departed users
- Assist with security awareness reminders and incident response tasks
- Follow documented change and approval procedures for policy or permission changes
Skills
- 1–3 years of experience in IT support, helpdesk, or systems administration
- Hands-on experience administering Google Workspace (users, groups, security settings, admin console)
- Experience with an HRIS or IT lifecycle platform — Rippling strongly preferred (Gusto, Justworks, BambooHR, or Okta/JumpCloud experience considered)
- Working knowledge of macOS and Windows support, plus basic networking (DNS, DHCP, VPN, Wi-Fi)
- Comfort with SaaS app administration, SSO, and role-based permission models
- Genuine interest in identity and access management, and the patience to do the inventory, documentation, and cleanup work that a real access control program requires
- Clear written and verbal communication; able to explain technical topics to non-technical staff
- Strong organizational habits, discretion with confidential data, and a bias toward documentation
- Rippling strongly preferred
- Google Workspace Administrator certification or CompTIA A+ / Network+
- Experience supporting a fully remote or hybrid workforce
- Familiarity with MDM tooling, endpoint security, or device compliance programs
- Basic scripting or automation experience (Apps Script, Python, or similar) and comfort working with app APIs or SCIM provisioning
- Exposure to IAM tooling (Okta, JumpCloud, Entra ID) or to SOC 2 / access review and audit processes
- Exposure to Slack, Zoom, Notion, Salesforce, or Atlassian administration
Benefits
- Remote work
Company Overview
Company H1B Sponsorship