Senior Google Workspace Administrator

CompuCom; Pune District; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

CompuCom seeks a senior Google Workspace administrator to lead advanced administration, security design, and IAM governance in a Google-first environment. You will escalate from L2, design policies, and coordinate with security/legal/procurement teams.

The role covers Gmail, Drive, Meet/Chat, Vault, and Marketplace governance, with on-call responsibilities and cross-functional collaboration for security and compliance.

Qualifications

• Must have 5+ years of Google Workspace admin experience with advanced Gmail/Drive governance.
• Experience with DLP, security controls, and incident response in Google Workspace.
• Strong stakeholder management and vendor escalation skills.

Responsibilities

• Administer Gmail, calendars, routing, and security policies; troubleshoot mail flows.
• Govern Drive/Shared Drives, external sharing controls, storage governance, access issues.
• Configure Meet/Chat policies, security settings, retention, and participation controls.
• Manage Workspace security, MFA enforcement, DLP rules, and incident triage.
• Administer Vault/eDiscovery, holds, searches, and exports with audit trails.
• Govern Marketplace apps, OAuth scopes, and third-party integrations.
• Serve as L3 escalation for login and configuration issues across Workspace apps.
• Implement IAM governance, JML lifecycle, and access recertification.
• Support adoption, change management, and usage reporting.
• Coordinate with Google Support and vendors during major incidents.

Skills

Google Workspace administration

Gmail administration

Drive/Shared drives governance

Google Vault/eDiscovery

DLP and security controls

Meet/Chat administration

IAM governance

Vendor coordination

Incident escalation handling

Policy and architecture design

Tools

GAM (Admin CLI)

GCDS

GCloud IAM

Job description

Role Summary

This role is the senior technical position within the Google Workspace managed services engagement at CompuCom. The L3 administrator handles advanced administration, complex troubleshooting, security architecture, policy design, and acts as the escalation point for L2 engineers. The role covers deep Google Workspace administration, IAM governance, security and compliance management, and cross-functional coordination with the Customer's security, legal, and procurement teams. This is a Google-first environment requiring expert-level Google Workspace knowledge.

Key Details

Service Tower: Google Workspace, IAM, UEM & Security

Experience Required: 711 years, including 5+ years in Google Workspace Administration

Shift: 24x7 with on-call support and incident escalation responsibility

Work Model: As per project requirements

Reports To: IT Systems Manager

Core Responsibilities

1. Gmail & Calendar Administration (Advanced)

Manage complex Gmail configurations including mail routing, content compliance rules, and mail flow policies. Configure and troubleshoot inbound/outbound gateways, split delivery, and multi-hop routing scenarios. Administer spam, phishing, and malware protection settings at an advanced level. Manage calendar sharing, delegation, and resource calendar administration. Troubleshoot mail delivery and calendar access issues escalated from L2. Support user, group, and alias management related to Gmail and Calendar.

2. Google Drive & Shared Drive Governance

Design, configure, and manage Drive and Shared Drive sharing policies at an organizational level. Administer Shared Drive membership, roles, and ownership structures. Configure and enforce external sharing controls and public link restrictions. Assist with storage usage management and governance reporting. Troubleshoot complex access, permission, and visibility issues escalated from L2.

3. Google Meet & Chat Administration

Manage Meet and Chat configuration, access, and policy enforcement at the organizational level. Configure meeting security settings and external participant controls. Administer Chat spaces, permissions, and retention settings. Troubleshoot Meet and Chat access and usage issues. Coordinate changes impacting collaboration policies across the organization.

4. Google Workspace Security & DLP (Advanced)

Configure and maintain Workspace security settings per approved organizational policies. Manage MFA/2SV enforcement, session controls, and administrative access roles. Design, configure, and tune DLP rules for Gmail and Drive (where licensed). Monitor Workspace security alerts and perform initial triage. Escalate security incidents per incident response procedures and coordinate with the Customer's security teams.

5. Google Vault & eDiscovery

Administer Google Vault access and permissions. Execute legal holds, searches, and exports upon written customer authorization. Maintain audit records of Vault activity performed by the MSP. Coordinate with customer legal and compliance teams for eDiscovery requests. Note: the MSP does not determine legal scope or retention requirements — these are customer-directed.

6. Marketplace & Third-Party App Governance

Review and manage Google Workspace Marketplace app installations. Approve, deny, or restrict third-party app access per customer policy. Manage OAuth app permissions and risk posture. Assist with cleanup of unused or unauthorized applications. Maintain documentation of approved third-party integrations.

7. Google Workspace User Support (L3 Escalation)

Serve as the escalation point for L2 engineers on complex login, access, configuration, and usage issues. Troubleshoot advanced issues across Gmail, Drive, Calendar, Meet, and Chat. Escalate complex issues to Google Support when required and manage vendor escalation and case management. Deliver support through approved ITSM channels.

8. IAM Governance & Identity Operations

Execute JML (Joiner, Mover, Leaver) lifecycle operations within the Google Workspace environment. Provision and revoke user and system access per governance policies. Support access recertification cycles and manage privileged access users. Ensure audit compliance and controls enforcement for identity operations. Handle identity-related incidents and service requests. Maintain access governance documentation.

9. Adoption, Change Management & Reporting

Support user communications for Workspace changes and enhancements. Assist with rollout planning for new Workspace features. Provide end-user guidance and knowledge articles. Identify common support trends impacting adoption. Provide recurring reports on Workspace usage, adoption, and security posture. Track license assignments and consumption by SKU. Identify unused or underutilized licenses and provide recommendations for license optimization. Support coordination with customer procurement teams.

10. Level 3 Incident Coordination & Vendor Management

Lead response for complex, higher-tiered Workspace incidents. Coordinate vendor escalation and case management with Google. Participate in CAB (Change Advisory Board) for non-standard and major changes. Manage change documentation and policy/architecture-level changes. Conduct service governance, QBRs (Quarterly Business Reviews), and continuous improvement initiatives.

Required Skills & Qualifications

Must-Have Technical Skills

• Expert-level experience administering Google Workspace via Google Admin Console (5+ years)
• Deep knowledge of Gmail administration — complex routing, content compliance, inbound/outbound gateways, split delivery, mail flow debugging using Email Log Search and message header analysis
• Advanced Google Drive and Shared Drive governance — policy design, external sharing controls, storage governance
• Proficiency in Google Vault — legal holds, eDiscovery, retention rules, search/export, and audit compliance
• Strong experience with Google Workspace DLP — custom rule design, incident investigation, false positive tuning, compliance alignment (HIPAA, GDPR, SOX)
• Advanced security administration — Context-Aware Access, Advanced Protection Program, OAuth app governance, sign-in monitoring, and incident response
• Experience with Google Meet and Chat administration — policy enforcement, security settings, retention
• Knowledge of Google Workspace Marketplace and third-party app governance — review, approval workflows, OAuth scope management
• Experience with ChromeOS device management, Chrome browser policy management, and endpoint compliance enforcement
• Identity lifecycle management (JML) within Google Workspace — provisioning, deprovisioning, access recertification
• Experience with PAM (Privileged Access Management) concepts in a Google environment
• Proficiency in Google Admin Console reporting — usage reports, security reports, audit logs
• Experience managing vendor escalations and case management with Google Support

Nice-to-Have Skills

• Google Workspace Administrator Certification (strongly preferred)
• Google Cloud Professional Cloud Security Engineer Certification
• Google Cloud Architect Certification
• Experience with GAM (Google Workspace Admin CLI) for advanced bulk operations and automation
• Experience with GCDS (Google Cloud Directory Sync) and hybrid identity environments
• Experience with Google Workspace migration tools and data migration projects
• Familiarity with Google Beyond Corp Enterprise / Zero Trust architecture
• Experience with SailPoint, Saviynt, or other IGA tools integrated with Google Workspace
• Knowledge of Google Cloud IAM and Google Cloud Identity platform
• ITIL certification or demonstrated experience with ITSM frameworks in managed services
• Experience supporting regulated environments (healthcare, finance, legal)
• Experience conducting QBRs and service governance for enterprise clients

Soft Skills

• Strong customer communication and executive stakeholder management
• SLA-driven delivery mindset with ownership of KPIs and service metrics
• Analytical problem-solving — ability to lead complex, cross-service troubleshooting
• Leadership in incident response — calm under pressure, structured RCA methodology
• Team mentorship — ability to guide and upskill L2 engineers
• Documentation excellence — runbooks, knowledge articles, change records, governance documentation
• Adaptability to 24x7 on-call responsibilities with incident escalation ownership