• Administer and maintain the Google Workspace environment, including Gmail, Drive, Calendar, Groups, Meet, and related services. • Manage user provisioning and deprovisioning, including account lifecycle management, Organization Unit structure, and role-based access controls. • Configure and maintain Google Admin Console settings including security controls, authentication policies, and device management. • Manage Google Groups structure, permissions, ownership, and membership, ensuring proper access to file shares and shared drives. • Support Shared Drives administration including ownership models, sharing controls, retention policies, and permission auditing. • Implement and maintain security best practices such as Multi-Factor Authentication (MFA) enforcement, Conditional Access equivalents, and session controls. • Configure and monitor Google Workspace audit logs and reporting dashboards to identify suspicious activity and compliance gaps. • Administer Google Vault for eDiscovery, retention policies, legal holds, and export requests as required. • Support data governance initiatives including Drive sharing restrictions, external sharing policies, and data loss prevention (DLP) settings. • Troubleshoot Workspace authentication, email routing, delivery issues, and end-user access problems. • Provide Tier-3 escalation support for the Service Center and remote Young Life staff related to Google Workspace services. • Coordinate with IT Security, Help Desk, and Infrastructure teams to implement Workspace security and compliance initiatives. • Maintain documentation of Google Workspace configurations, policies, and operational procedures. • Coordinate with vendors and Google support for troubleshooting and escalations as needed. • Assist with infrastructure-related projects that integrate with Workspace, including SSO, identity federation, and automation tools.