IT Administrator – Google Workspace, Rippling

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage users, groups, organizational units, aliases, Gmail, Drive, shared drives, Calendar, Meet, and Groups settings within Google Workspace.

• Implement Google Workspace security protocols, including two-step verification, app access controls, third-party OAuth assessments, and device management.

• Review admin audit and login reports, investigate any suspicious activities, and address phishing incidents.

• Oversee license assignments, storage usage, data retention, exports, and account transfers for departing employees.

• Maintain employee records, organizational hierarchy, and role-based access permissions in Rippling.

• Develop and execute onboarding and offboarding processes, which include application provisioning and de-provisioning.

• Manage application oversight and SSO connections for third-party applications.

• Support device inventory, enrollment, and MDM policies via Rippling.

• Collaborate with HR and Finance on employee lifecycle modifications, reporting, and visibility into application expenditures.

• Create and sustain a comprehensive inventory of applications, systems, and data repositories.

• Assist in defining an RBAC model that aligns job roles and departments with standardized permission sets.

• Integrate authentication through SSO whenever feasible and document any exceptions to integration.

• Facilitate automated provisioning and de-provisioning throughout the employee lifecycle.

• Establish recurring access review workflows and provide evidence of their completion.

• Implement logging and alerting mechanisms for privileged access, permission modifications, and unusual sign-ins.

• Document access policies, request and approval workflows, and break-glass protocols in Notion.

• Monitor and report on access-control advancements and provisioning metrics.

• Offer first-line support for hardware, software, account, and access requests.

• Manage, prioritize, resolve, and escalate IT tickets within established response timelines.

• Prepare, configure, dispatch, and recover laptops and peripherals for a remote workforce.

• Keep precise asset inventory and license records.

• Create and maintain internal documentation, instructional guides, and IT onboarding materials in Notion.

• Provide support for conference room A/V, VPNs, printers, and other office technology as needed.

• Uphold least-privilege access principles.

• Conduct periodic access reviews and ensure prompt removal of departed users.

• Assist with security awareness initiatives and incident response activities.

• Adhere to documented change and approval protocols.

• Meet 30-, 60-, and 90-day objectives, including independent ticket resolution, documented lifecycle workflows, RBAC mapping, access reviews, inventory management, IT documentation, and application/access inventory.

⛳️ Requirements

• 1 to 3 years of experience in IT support, helpdesk, or systems administration.

• Practical experience with administering Google Workspace, encompassing users, groups, security configurations, and the admin console.

• Familiarity with an HRIS or IT lifecycle platform; Rippling is highly preferred, with Gusto, Justworks, BambooHR, Okta, or JumpCloud experience also considered.

• Proficient knowledge of macOS and Windows support.

• Fundamental understanding of networking concepts, including DNS, DHCP, VPN, and Wi-Fi.

• Comfort with managing SaaS applications, SSO, and role-based permission structures.

• A genuine interest in identity and access management.

• Excellent written and verbal communication skills, with the ability to convey technical topics to non-technical personnel.

• Strong organizational skills.

• Ability to handle confidential information discreetly.

• A preference for thorough documentation.

• Google Workspace Administrator certification or CompTIA A+ / Network+ is preferred.

• Experience supporting a fully remote or hybrid workforce is preferred.

• Familiarity with MDM tools, endpoint security, or device compliance programs is preferred.

• Basic scripting or automation knowledge, such as Apps Script or Python, and comfort with app APIs or SCIM provisioning is preferred.

• Exposure to IAM tools like Okta, JumpCloud, or Entra ID, or to SOC 2/access review and audit processes is preferred.

• Familiarity with Slack, Zoom, Notion, Salesforce, or Atlassian administration is preferred.

🏝️ Benefits

• Contract employment.

• Remote work opportunity.

• Reports directly to technology leadership.