Role Overview:This role is for a Google Cloud Engineer specializing in the administration, security, and management of Google Workspace and Cloud Identity environments. The position involves ensuring robust security postures, managing user lifecycles, and implementing compliance across various Google Cloud services and endpoints.
Key Responsibilities:- Manage user group/OU lifecycle and policies in Admin console, automating onboarding/offboarding workflows.
- Secure Gmail, Drive, Docs, Sheets, Slides, Calendar, Meet, and Chat with spam/phishing defense, DLP, sharing controls, and retention.
- Implement and maintain SSO/SAML/OAuth with the IdP, enforcing 2-step verification, context-aware access, and Zero Trust posture.
- Administer endpoint management across Android, iOS, macOS, Windows, ChromeOS, defining compliance profiles and remediation.
- Manage domains, DNS, mail routing, SPF/DKIM/DMARC, delegated access, and third-party app governance.
- Operate Vault for retention holds and eDiscovery, coordinating with Legal and Audit stakeholders as needed.
- Monitor Security Center alerts and admin logs, triaging threats, remediating misconfigurations, and leading improvements.
- Build automations and reporting with Apps Script Admin SDK for workflows, access reviews, and compliance evidence.
- Document standards, run change management, and deliver admin training.
Required Skills:- Power Query
- DAX
- Hyper extracts
- Tableau APIs
- TSC (Tableau Server Client)
- Usage/Content admin
- Service/Fabric
- Dataflows
- Deployment Pipelines
- Gateways
- RLS/OLS
- Workspaces/Capacity
- Google Admin Console
- Security Center
- Audit/Admin logs
- Google Endpoint Management (Android, iOS, macOS, Windows, ChromeOS)
- MDM/Compliance profiles
- 2-Step Verification
- Context-Aware Access
- DLP
- App access control
- OAuth app whitelisting/blocks
- Cloud Identity
- SAML/OAuth/OIDC
- Directory Sync/SCIM
- IdP (Okta, Entra ID/Azure AD)
- SPF
- DKIM
- DMARC
- Mail routing
- Postmaster Tools
Qualifications:Preferred Skills:- Digital Security
- CloudOps for Google Cloud