This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more.

Role Description

We are looking for a talented and tenured Google Workspace Administrator to act as the primary technical expert for our Google Workspace environment. This critical role involves advanced administration, configuration, security, and automation to ensure a secure, optimized, and compliant cloud-based operation. Along with Google Workspace expertise, this specialist will drive various DLP and security ops efforts.

Remote candidates must be physically located within the United States.

Responsibilities

• Google Workspace Administration & Automation
  • Serve as the Tier 3 administrator and escalation point for all aspects of Google Workspace, managing complex configurations, security settings, and Organizational Units (OUs).
  • Manage the full user lifecycle (provisioning, de-provisioning) across the GWS domain.
  • Demonstrate deep, hands-on expertise in the entire GWS suite, including the Security Center, Investigation Tool, Google Vault, and Audit Logs.
  • Develop and implement automation solutions using Google Apps Script (GAS) and/or Google Cloud Platform (GCP) services (e.g., Cloud Functions) to streamline provisioning, reporting, and administrative workflows.
  • Implement and manage advanced security controls, including Context-Aware Access (CAA), advanced phishing/malware protection, and secure data sharing policies.
  • Utilize GWS Audit Logs for security monitoring, compliance, and internal investigations.
  • Provide advanced technical support for all end-user issues related to core Google Workspace services.
• Third-Party App Governance
  • Responsibility for vetting and managing OAuth tokens and third-party marketplace apps to prevent data exfiltration.
• Project Management
  • Proven ability to lead complex projects, such as domain consolidations, tenant-to-tenant migrations, or global security hardening initiatives.
• eDiscovery & Security Operations
  • Lead and execute security and HR-mandated internal investigations using the Google Workspace Investigation Tool for complex data searches across Drive, Gmail, and Chat.
  • Manage eDiscovery and Legal Hold processes using Google Vault, ensuring chain-of-custody for evidentiary purposes and exporting compliant data sets.
  • Develop and deliver security awareness training focused on safe data handling and proper use of Google Workspace tools.
  • DLP (Data Loss Prevention): Designing and maintaining DLP rules for Drive and Gmail to protect PII/PHI.
  • Chrome Browser Management: Managing Chrome at the enterprise level (profiles, extensions, and security policies).
  • Mobile Device Management (MDM): Overseeing Google Endpoint Management for mobile and laptop devices.
  • Establish and maintain Shared Drive governance, including naming conventions, membership lifecycle, and external sharing restrictions.
  • Develop long-term storage optimization strategies to balance user productivity with organizational costs.

Qualifications

• Expert-level proficiency in administering and securing Google Workspace (Enterprise/Plus features).
• Professional Google Workspace Administrator Certification preferred.
• CLI Tools: Mastery of GAM/GAM7 for command-line administration.
• Strong experience with the Google Workspace Admin Console for managing users, services, security settings, and OUs.
• Architect-level experience with Google Cloud Identity and integrating GWS with external identity providers (IdP) via SAML/OAuth.
• Directory Sync: Experience with Google Cloud Directory Sync (GCDS) or Azure AD/Okta provisioning.
• Proficiency in Google Apps Script (GAS) or other scripting languages for administrative automation.
• Familiarity with general cloud computing concepts and the Google Cloud ecosystem.
• Solid understanding of security protocols, data privacy, and the ability to maintain the security of the Google Workspace domain.
• Experience with large-scale GWS deployments, migrations, and hybrid environments.

Requirements

• $95,000 - $131,000 a year
• As a full-time Google Workspace & DLP Specialist, you will be employed by Lyra Health, Inc. The anticipated annual base salary range for this full-time position is $95,000 to $131,000.
• The base range is determined by role and level, and placement within the range will depend on a number of job-related factors, including but not limited to your skills, qualifications, experience and location.
• This role may also be eligible for discretionary bonuses.

Benefits

• Comprehensive healthcare coverage (including medical, dental, vision, FSA/HSA, life and disability insurances).
• Lyra for Lyrians; coaching and therapy services.
• Equity in the company through discretionary restricted stock units.
• Competitive time off with pay policies including vacation, sick days, and company holidays.
• Paid parental leave.
• 401K retirement benefits.
• Monthly tech allowance.
• We like to spread joy throughout the year with well-being perks and activities, surprise swag, regular community celebration…and more!