Google Workspace Administrator

Bounty Fresh Food, Inc.; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Bounty Fresh Food, Inc. in the Philippines seeks a senior Google Workspace Administrator to own identity management, SSO integrations, and secure access across the organization.

You will automate onboarding/offboarding, design OUs and Groups, and manage Workspace services as global admin for Gmail, Drive, Calendar, Meet and Chat. You will enforce MFA, implement context-aware access, configure SPF/DKIM/DMARC, manage Google Vault retention, audits and documentation, and lead large-scale workspace

Qualifications

• Bachelor's degree in Information Technology, Computer Engineering, or related field.
• At least 4 years of solid experience administering Google Workspace or equivalent, preferably in FMCG/manufacturing.
• Expert knowledge in managing identity environments via SSO/SAML (Okta, Azure AD, JumpCloud).
• Proficiency in Google Apps Script or Python for custom workflows connecting Workspace to business apps.
• Strong background in securing mail flow with SPF, DKIM, and DMARC to ensure deliverability and prevent spoofing.
• Experience leading large-scale projects like domain consolidations or data migrations.
• Knowledge of API basics or prompt engineering is a plus.

Responsibilities

• Onboarding/Offboarding automation for day-one access and secure de-provisioning.
• Design and maintain OUs and Groups for access control.
• Integrate Workspace with identity providers (Okta, Azure AD, JumpCloud) and manage SSO.
• Enforce MFA/2SV and context-aware access.Create and monitor DLP rules and data retention.
• Manage Google Vault retention policies, holds, and searches.
• Configure DNS, SPF, DKIM, DMARC for email security and deliverability.
• Act as Global Admin for Gmail, Drive, Calendar, Meet, and Chat.
• Oversee Shared Drives, memberships, and orphan file recovery.
• Audit third-party apps and manage API access/tokens.
• Use GAM or Python for bulk operations and automation.
• Incident response and troubleshooting of security alerts.

Skills

Automation

Security best practices

Performance optimization

Communication

Troubleshooting

Education

Bachelor's Degree in Information Technology/Computer Engineering or related field

Tools

Google Apps Script

Python

Okta

Azure AD

JumpCloud

Job description

Duties and Responsibilities:

1. User & Identity Management

• Onboarding/Offboarding: Automate the provisioning and deprovisioning of accounts to ensure "day-one" access for new hires and secure data preservation for departing employees.
• Organizational Structure: Design and maintain Organizational Units (OUs) and Groups to manage permissions and service access effectively.
• SSO & IAM: Integrate Workspace with Identity Providers (like Okta or Azure AD) and manage SSO configurations.

2. Security & Data Governance

• Access Control: Enforce Multi-Factor Authentication (MFA/2SV) and Context-Aware
• Access (limiting access based on location or device health).
• Data Loss Prevention (DLP): Create and monitor rules to prevent sensitive data (like credit card numbers or internal IP) from being shared outside the company.
• Google Vault: Manage retention policies, legal holds, and Discovery searches for legal and compliance teams.
• DNS & Email Security: Configure and troubleshoot SPF, DKIM, and DMARC records to prevent spoofing and ensure high email deliverability.

3. Service Configuration & Optimization

• Core Services: Act as the "Global Admin" for Gmail, Drive, Calendar, Meet, and Chat-optimizing settings to balance user productivity with company security.
• Shared Drive Architecture: Manage the lifecycle of Shared Drives, including membership audits and "orphan" file recovery.
• Marketplace & API Management: Audit third-party apps requesting access to corporate data and manage Auth token grants.

4. Automation & Advanced Troubleshooting

• Bulk Operations: Use GAM or Python scripts to execute changes across thousands of users simultaneously (e.g., "Change the signature for everyone in the Sales department").
• Mobile Device Management (MDM): Manage company-owned and BYOD devices (iOS, Android, ChromeOS), including remote wipes for lost devices.
• Incident Response: Investigate security alerts, such as suspicious logins or "state-sponsored attack" warnings, using the Security Investigation Tool.

5. Monitoring & Documentation

• Audit Logs: Regularly review Admin Audit Logs and Export BigQuery logs for long-term trend analysis.
• Technical Writing: Maintain a "Runbook" for common IT tasks and create end-user documentation for new Google features.

KEY QUALIFICATIONS

Education: Bachelor's Degree in Information Technology, Computer Engineering, or any related field.

Experience:

• At least 4 years of solid experience in administrating Google workspace or equivalent preferably within FMCG, manufacturing or related industries
• Expert knowledge in managing complex identity environments via SSO/SAML integrations (e.g., Okta, Azure AD, or JumpCloud).
• Proficiency in Google Apps Script or Python for building custom workflows and connecting Workspace to other business applications.
• Strong technical background in securing global mail flow through SPF, DKIM, and DMARC protocols to ensure deliverability and prevent spoofing.
• Knowledge and proven record in leading large-scale projects, such as domain consolidations, data migrations, or global rollouts of new Workspace features.
• Expertise in Al integration tools, API basics, or prompt engineering for technical workflows is a plus.

Special Skills:

• Automation and scripting
• Security best practices
• System performance optimization
• Strong communication and collaboration with stakeholders and counterparts
• Strong troubleshooting, problem solving and decision making

Certifications and Trainings:

• Professional google workspace administrator
• Comptia Security +
• Google Associate Cloud Engineer
• ITIL Certification

WORK ARRANGEMENT: FULL ONSITE IN BGC, TAGUIG | MON - FRI