• Manage, monitor, and maintain Ubuntu and Red Hat Linux servers (production and staging) • Perform system upgrades, kernel updates, patch management, and performance tuning • Implement and manage user access, security policies, and backup/recovery strategies • Troubleshoot and resolve hardware, OS, and network-related issues • Maintain configuration management and deployment pipelines using Ansible, Puppet, or similar tools • Monitor system health and resource utilization; ensure optimal uptime and performance • Collaborate with DevOps and Cloud teams for environment provisioning (AWS, Azure, or on-prem) • Manage server hardening, SSH configuration, SSL certificates, and OS-level security compliance • Participate in capacity planning, disaster recovery, and incident response activities • Create and maintain detailed system documentation, SOPs, and audit reports

• Manage, monitor, and maintain Ubuntu and Red Hat Linux servers (production and staging) • Perform system upgrades, kernel updates, patch management, and performance tuning • Implement and manage user access, security policies, and backup/recovery strategies • Troubleshoot and resolve hardware, OS, and network-related issues • Maintain configuration management and deployment pipelines using Ansible, Puppet, or similar tools • Monitor system health and resource utilization; ensure optimal uptime and performance • Collaborate with DevOps and Cloud teams for environment provisioning (AWS, Azure, or on-prem) • Manage server hardening, SSH configuration, SSL certificates, and OS-level security compliance • Participate in capacity planning, disaster recovery, and incident response activities • Create and maintain detailed system documentation, SOPs, and audit reports

This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description We are looking for a talented and tenured Google Workspace Administrator to act as the primary technical expert for our Google Workspace environment. This critical role involves advanced administration, configuration, security, and automation to ensure a secure, optimized, and compliant cloud-based operation. Along with Google Workspace expertise, this specialist will drive various DLP and security ops efforts. Remote candidates must be physically located within the United States. Responsibilities - Google Workspace Administration & Automation - Serve as the Tier 3 administrator and escalation point for all aspects of Google Workspace, managing complex configurations, security settings, and Organizational Units (OUs). - Manage the full user lifecycle (provisioning, de-provisioning) across the GWS domain. - Demonstrate deep, hands-on expertise in the entire GWS suite, including the Security Center, Investigation Tool, Google Vault, and Audit Logs. - Develop and implement automation solutions using Google Apps Script (GAS) and/or Google Cloud Platform (GCP) services (e.g., Cloud Functions) to streamline provisioning, reporting, and administrative workflows. - Implement and manage advanced security controls, including Context-Aware Access (CAA), advanced phishing/malware protection, and secure data sharing policies. - Utilize GWS Audit Logs for security monitoring, compliance, and internal investigations. - Provide advanced technical support for all end-user issues related to core Google Workspace services. - Third-Party App Governance - Responsibility for vetting and managing OAuth tokens and third-party marketplace apps to prevent data exfiltration. - Project Management - Proven ability to lead complex projects, such as domain consolidations, tenant-to-tenant migrations, or global security hardening initiatives. - eDiscovery & Security Operations - Lead and execute security and HR-mandated internal investigations using the Google Workspace Investigation Tool for complex data searches across Drive, Gmail, and Chat. - Manage eDiscovery and Legal Hold processes using Google Vault, ensuring chain-of-custody for evidentiary purposes and exporting compliant data sets. - Develop and deliver security awareness training focused on safe data handling and proper use of Google Workspace tools. - DLP (Data Loss Prevention): Designing and maintaining DLP rules for Drive and Gmail to protect PII/PHI. - Chrome Browser Management: Managing Chrome at the enterprise level (profiles, extensions, and security policies). - Mobile Device Management (MDM): Overseeing Google Endpoint Management for mobile and laptop devices. - Establish and maintain Shared Drive governance, including naming conventions, membership lifecycle, and external sharing restrictions. - Develop long-term storage optimization strategies to balance user productivity with organizational costs. Qualifications - Expert-level proficiency in administering and securing Google Workspace (Enterprise/Plus features). - Professional Google Workspace Administrator Certification preferred. - CLI Tools: Mastery of GAM/GAM7 for command-line administration. - Strong experience with the Google Workspace Admin Console for managing users, services, security settings, and OUs. - Architect-level experience with Google Cloud Identity and integrating GWS with external identity providers (IdP) via SAML/OAuth. - Directory Sync: Experience with Google Cloud Directory Sync (GCDS) or Azure AD/Okta provisioning. - Proficiency in Google Apps Script (GAS) or other scripting languages for administrative automation. - Familiarity with general cloud computing concepts and the Google Cloud ecosystem. - Solid understanding of security protocols, data privacy, and the ability to maintain the security of the Google Workspace domain. - Experience with large-scale GWS deployments, migrations, and hybrid environments. Requirements - $95,000 - $131,000 a year - As a full-time Google Workspace & DLP Specialist, you will be employed by Lyra Health, Inc. The anticipated annual base salary range for this full-time position is $95,000 to $131,000. - The base range is determined by role and level, and placement within the range will depend on a number of job-related factors, including but not limited to your skills, qualifications, experience and location. - This role may also be eligible for discretionary bonuses. Benefits - Comprehensive healthcare coverage (including medical, dental, vision, FSA/HSA, life and disability insurances). - Lyra for Lyrians; coaching and therapy services. - Equity in the company through discretionary restricted stock units. - Competitive time off with pay policies including vacation, sick days, and company holidays. - Paid parental leave. - 401K retirement benefits. - Monthly tech allowance. - We like to spread joy throughout the year with well-being perks and activities, surprise swag, regular community celebration…and more!

• Participate in an on-call rotation (1 week per month as part of a 4-person rotation) • Provide steady-state operational support for middleware platforms and related infrastructure • Perform and support application deployments across environments • Participate in release turnovers and coordinated implementation activities • Troubleshoot and resolve production issues with strong analytical and diagnostic skills