Google Workspace Administrator

Tata Consultancy Services; Sunnyvale (CA); On-site; USD 64,000 - 110,000; Full time

Job summary

Tata Consultancy Services in Sunnyvale is looking for a Google Workspace Security Specialist to manage Admin Console workflows and security configurations. You will secure Gmail, Drive, Docs/Sheets/Slides, Calendar, Meet, and Chat, enforce DLP and retention, and lead access controls across devices and platforms.

The role requires expertise in SSO/SAML/OAuth, 2-step verification, and context-aware access. You will coordinate with Legal and IT to maintain governance and incident response processes.

Qualifications

• Experience administering Google Workspace security and admin workflows.
• Strong knowledge of identity and access management and data loss prevention.
• Familiarity with SSO/OAuth/SAML and zero-trust security concepts.

Responsibilities

• Manage user/group/OU lifecycle and policies in Admin console; automate onboarding/offboarding workflows.
• Secure Gmail, Drive, Docs/Sheets/Slides, Calendar, Meet, and Chat; implement phishing defense and DLP controls.
• Implement and maintain SSO/SAML/OAuth with the IdP; enforce 2-step verification, context-aware access, and Zero Trust posture.
• Administer endpoint management across Android/iOS/macOS/Windows/ChromeOS; define compliance profiles and remediation.
• Manage domains, DNS, mail routing, SPF/DKIM/DMARC, delegated access, and third-party app governance.
• Operate Vault for retention, holds, and eDiscovery; coordinate with Legal/Audit stakeholders as needed.
• Monitor Security Center, alerts, and admin logs; triage threats, remediate misconfigurations, and lead improvements.
• Build automations and reporting with Apps Script/Admin SDK for workflows, access reviews, and compliance evidence.
• Document standards, run change management, and deliver admin training.

Skills

Identity & Access Management

Security best practices

Cloud security

G Suite / Google Workspace security

Tools

Google Admin Console

Security Center

MDM/Compliance profiles

SAML/OAuth/OIDC

Job description

Job Description

Must Have Technical/Functional Skills: Google Admin Console; Security Center; Audit/Admin logs; Google Endpoint Management (Android/iOS/macOS/Windows/ChromeOS); MDM/Compliance profiles; 2-Step Verification; Context-Aware Access; DLP; App access control; OAuth app whitelisting/blocks; Cloud Identity; SAML/OAuth/OIDC; Directory Sync/SCIM; IdP (Okta; Entra ID/Azure AD); SPF; DKIM; DMARC; mail routing; Postmaster Tools

Roles & Responsibilities

• Manage user/group/OU lifecycle and policies in Admin console; automate onboarding/offboarding workflows.
• Secure Gmail, Drive, Docs/Sheets/Slides, Calendar, Meet, and Chat (spam/phishing defense, DLP, sharing controls, retention).
• Implement and maintain SSO/SAML/OAuth with the IdP; enforce 2-step verification, context-aware access, and Zero Trust posture.
• Administer endpoint management across Android/iOS/macOS/Windows/ChromeOS; define compliance profiles and remediation.
• Manage domains, DNS, mail routing, SPF/DKIM/DMARC, delegated access, and third-party app governance.
• Operate Vault for retention, holds, and eDiscovery; coordinate with Legal/Audit stakeholders as needed.
• Monitor Security Center, alerts, and admin logs; triage threats, remediate misconfigurations, and lead improvements.
• Build automations and reporting with Apps Script/Admin SDK for workflows, access reviews, and compliance evidence.
• Document standards, run change management, and deliver admin training.

Salary Range: $64,000 - $110,000 a year