Google Workspace Security Subject Matter Expert

This is a fully remote position, open to applicants in Maryland.

📋 Description

• Perform a comprehensive audit of the Google Workspace for Education Plus tenant using the Google Admin Console.

• Assess configurations in relation to industry best practices.

• Review and strengthen Gmail settings, such as SPF, DKIM, DMARC, compliance routing, and advanced anti-phishing protocols.

• Review and enhance Google Drive settings, including external sharing policies, link defaults, and data loss prevention (DLP) rules.

• Evaluate the requirement for mandatory multi-factor authentication (MFA) and develop a transition plan towards phishing-resistant MFA, including FIDO2 security keys, Passkeys, and Context-Aware Access policies.

• Analyze patterns of account compromise and investigate methodologies for session hijacking.

• Suggest automated controls to identify and prevent internal spam incidents.

• Provide a prioritized findings report that includes immediate remediation actions, medium-term configuration adjustments, and long-term security governance suggestions.

⛳️ Requirements

• Extensive knowledge of Google Workspace for Education Plus architecture, Organizational Units (OUs), and the delegation of administrative roles.

• Advanced expertise in SPF, DKIM, DMARC, inbound/outbound content filtering, and techniques for mitigating bulk mail.

• Documented experience in implementing Context-Aware Access (CAA) rules and transitioning organizations to phishing-resistant 2-Step Verification (2SV).

• Proficiency in the Google Workspace Investigation Tool, Alert Center, and log analysis techniques.

• At least 3–5 years of practical experience in auditing, hardening, and securing extensive Google Workspace environments.

• Familiarity with the operational workflows and privacy considerations of educational institutions, including compliance with FERPA.

• Essential: Google Cloud Professional Google Workspace Administrator certification.

• Strong technical consulting skills with the ability to convert complex log data and vulnerabilities into clear, actionable recommendations for executives.

🏝️ Benefits

• Healthcare benefits.

• Wellness benefits.

• Financial benefits.

• Retirement benefits.

• Family support benefits.

• Continuing education benefits.

• Time off benefits.

• Flexible work arrangements that promote work-life balance.

• Opportunities for learning and development.