This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description We are looking for a talented and tenured Google Workspace Administrator to act as the primary technical expert for our Google Workspace environment. This critical role involves advanced administration, configuration, security, and automation to ensure a secure, optimized, and compliant cloud-based operation. Along with Google Workspace expertise, this specialist will drive various DLP and security ops efforts. Remote candidates must be physically located within the United States. Responsibilities - Google Workspace Administration & Automation - Serve as the Tier 3 administrator and escalation point for all aspects of Google Workspace, managing complex configurations, security settings, and Organizational Units (OUs). - Manage the full user lifecycle (provisioning, de-provisioning) across the GWS domain. - Demonstrate deep, hands-on expertise in the entire GWS suite, including the Security Center, Investigation Tool, Google Vault, and Audit Logs. - Develop and implement automation solutions using Google Apps Script (GAS) and/or Google Cloud Platform (GCP) services (e.g., Cloud Functions) to streamline provisioning, reporting, and administrative workflows. - Implement and manage advanced security controls, including Context-Aware Access (CAA), advanced phishing/malware protection, and secure data sharing policies. - Utilize GWS Audit Logs for security monitoring, compliance, and internal investigations. - Provide advanced technical support for all end-user issues related to core Google Workspace services. - Third-Party App Governance - Responsibility for vetting and managing OAuth tokens and third-party marketplace apps to prevent data exfiltration. - Project Management - Proven ability to lead complex projects, such as domain consolidations, tenant-to-tenant migrations, or global security hardening initiatives. - eDiscovery & Security Operations - Lead and execute security and HR-mandated internal investigations using the Google Workspace Investigation Tool for complex data searches across Drive, Gmail, and Chat. - Manage eDiscovery and Legal Hold processes using Google Vault, ensuring chain-of-custody for evidentiary purposes and exporting compliant data sets. - Develop and deliver security awareness training focused on safe data handling and proper use of Google Workspace tools. - DLP (Data Loss Prevention): Designing and maintaining DLP rules for Drive and Gmail to protect PII/PHI. - Chrome Browser Management: Managing Chrome at the enterprise level (profiles, extensions, and security policies). - Mobile Device Management (MDM): Overseeing Google Endpoint Management for mobile and laptop devices. - Establish and maintain Shared Drive governance, including naming conventions, membership lifecycle, and external sharing restrictions. - Develop long-term storage optimization strategies to balance user productivity with organizational costs. Qualifications - Expert-level proficiency in administering and securing Google Workspace (Enterprise/Plus features). - Professional Google Workspace Administrator Certification preferred. - CLI Tools: Mastery of GAM/GAM7 for command-line administration. - Strong experience with the Google Workspace Admin Console for managing users, services, security settings, and OUs. - Architect-level experience with Google Cloud Identity and integrating GWS with external identity providers (IdP) via SAML/OAuth. - Directory Sync: Experience with Google Cloud Directory Sync (GCDS) or Azure AD/Okta provisioning. - Proficiency in Google Apps Script (GAS) or other scripting languages for administrative automation. - Familiarity with general cloud computing concepts and the Google Cloud ecosystem. - Solid understanding of security protocols, data privacy, and the ability to maintain the security of the Google Workspace domain. - Experience with large-scale GWS deployments, migrations, and hybrid environments. Requirements - $95,000 - $131,000 a year - As a full-time Google Workspace & DLP Specialist, you will be employed by Lyra Health, Inc. The anticipated annual base salary range for this full-time position is $95,000 to $131,000. - The base range is determined by role and level, and placement within the range will depend on a number of job-related factors, including but not limited to your skills, qualifications, experience and location. - This role may also be eligible for discretionary bonuses. Benefits - Comprehensive healthcare coverage (including medical, dental, vision, FSA/HSA, life and disability insurances). - Lyra for Lyrians; coaching and therapy services. - Equity in the company through discretionary restricted stock units. - Competitive time off with pay policies including vacation, sick days, and company holidays. - Paid parental leave. - 401K retirement benefits. - Monthly tech allowance. - We like to spread joy throughout the year with well-being perks and activities, surprise swag, regular community celebration…and more!

• Participate in an on-call rotation (1 week per month as part of a 4-person rotation) • Provide steady-state operational support for middleware platforms and related infrastructure • Perform and support application deployments across environments • Participate in release turnovers and coordinated implementation activities • Troubleshoot and resolve production issues with strong analytical and diagnostic skills

• Responsible for implementing, analyzing, and continuously improving the business system in area of responsibility to support evolving business processes and growth. • Own security and access control, including role design and permissioning; support periodic reviews and audit readiness. • Own day-to-day IT operations and end-user support for a remote company, serving as the primary escalation point for complex issues. • Manage identity, device, and SaaS systems across macOS, Windows, and cloud tools, including access control, provisioning, and license optimization. • Supports the creation and maintenance of SOPs, FAQs, user training, and other technical documentation to support deliverable requirements, internal team needs, and to share with end users to support self-resolution. • Familiarity with standard IT concepts, practices, and procedures, to include ITIL and ISO best practices.

• Own and administer the company’s Identity Provider (IdP), including SSO, MFA, access policies, and identity lifecycle management • Design, configure, and maintain SAML and SCIM integrations with internal and third-party applications • Maintain and optimize integrations between Google Workspace, HR system, and the Identity Provider to automate joiner, mover, and leaver processes • Administer cloud services with a focus on access governance, security, licensing, and automation • Monitor system health, diagnose complex cross-platform issues, and lead resolution of identity- and access-related incidents • Lead and execute system migrations between cloud, on-premises, and SaaS platforms • Support Service Desk colleagues in handling complex escalations and providing guidance on advanced technical issues • Contribute to regular ticket resolution when required, particularly for high-impact or complex cases, ensuring service continuity • Collaborate closely with the Information Security team on access controls, security reviews, and audit-related activities • Drive continuous improvement of identity, access, and cloud processes through automation and standardization