GOOGLE WORKSPACE ADMINISTRATOR

The System Administrator is assigned to manage, maintain, secure, and optimize the enterprise Google cloud collaboration environment. This role is responsible for core service administration, user lifecycle management, security policy enforcement, data loss prevention, incident response, and operational documentation. Furthermore, the role requires strong hands-on experience with the Google Admin Console, Google Apps Manager automation, security hardening, and troubleshooting in production environments.

Duties and Responsibilities:

1. User & Identity Management

• Onboarding/Offboarding: Automate the provisioning and deprovisioning of accounts to ensure "day-one" access for new hires and secure data preservation for departing employees.
• Organizational Structure: Design and maintain Organizational Units (OUs) and Groups to manage permissions and service access effectively.
• SSO & IAM: Integrate Workspace with Identity Providers (like Okta or Azure AD) and manage SSO configurations.

2. Security & Data Governance

• Access Control: Enforce Multi-Factor Authentication (MFA/2SV) and Context-Aware
• Access (limiting access based on location or device health).
• Data Loss Prevention (DLP): Create and monitor rules to prevent sensitive data (like credit card numbers or internal IP) from being shared outside the company.
• Google Vault: Manage retention policies, legal holds, and Discovery searches for legal and compliance teams.
• DNS & Email Security: Configure and troubleshoot SPF, DKIM, and DMARC records to prevent spoofing and ensure high email deliverability.

3. Service Configuration & Optimization

• Core Services: Act as the "Global Admin" for Gmail, Drive, Calendar, Meet, and Chat-optimizing settings to balance user productivity with company security.
• Shared Drive Architecture: Manage the lifecycle of Shared Drives, including membership audits and "orphan" file recovery.
• Marketplace & API Management: Audit third-party apps requesting access to corporate data and manage Auth token grants.

4. Automation & Advanced Troubleshooting

• Bulk Operations: Use GAM or Python scripts to execute changes across thousands of users simultaneously (e.g., "Change the signature for everyone in the Sales department").
• Mobile Device Management (MDM): Manage company-owned and BYOD devices (iOS, Android, ChromeOS), including remote wipes for lost devices.
• Incident Response: Investigate security alerts, such as suspicious logins or "state-sponsored attack" warnings, using the Security Investigation Tool.

5. Monitoring & Documentation

• Audit Logs: Regularly review Admin Audit Logs and Export BigQuery logs for long-term trend analysis.
• Technical Writing: Maintain a "Runbook" for common IT tasks and create end-user documentation for new Google features.

KEY QUALIFICATIONS:

Education:

• Bachelor's Degree in Information Technology, Computer Engineering, or any related field.

Experience:

• At least 4 years of solid experience in administrating Google workspace or equivalent preferably within FMCG, manufacturing or related industries
• Expert knowledge in managing complex identity environments via SSO/SAML integrations (e.g., Okta, Azure AD, or JumpCloud).
• Proficiency in Google Apps Script or Python for building custom workflows and connecting Workspace to other business applications.
• Strong technical background in securing global mail flow through SPF, DKIM, and DMARC protocols to ensure deliverability and prevent spoofing.
• Knowledge and proven record in leading large-scale projects, such as domain consolidations, data migrations, or global rollouts of new Workspace features.
• Expertise in Al integration tools, API basics, or prompt engineering for technical workflows is a plus.

Special Skills:

• Automation and scripting
• Security best practices
• System performance optimization
• Strong communication and collaboration with stakeholders and counterparts
• Strong troubleshooting, problem solving and decision making

Certifications and Trainings:

• Professional google workspace administrator
• Comptia Security +
• Google Associate Cloud Engineer
• ITIL Certification

WORK ARRANGEMENT: FULL ONSITE IN BGC, TAGUIG | MON-FRI | DAYSHIFT