Google Workspace / Chrome Enterprise Engineer

TIAG; Chevy Chase (MD); Hybrid; USD 120,000 - 190,000; Full time

Job summary

TIAG is seeking a Google Workspace / Chrome Enterprise Engineer to support USUHS in Bethesda, MD. This role requires a Secret clearance and is onsite in Bethesda with a hybrid schedule (one day per week).

You will help manage CBCM policies, browser security, and policy design for a major operational transition across multi-site Federal environments. The ideal candidate has 5+ years in enterprise systems engineering, expertise in Google Workspace Admin Console, Chrome Cloud Management, and

Qualifications

• Bachelor's degree in Systems Engineering, CS, or IT.
• 5+ years in enterprise systems engineering with Google Workspace and Chrome.
• Experience migrating GPO to cloud and policy orchestration for DoD/federal environments.
• Knowledge of NIST, FAR, and DoD Zero Trust architectures.

Responsibilities

• Configure CBCM cloud management policies and enroll devices.
• Develop and document browser rules with data protection considerations.
• Enforce Context-Aware Access on BYOD devices accessing agency apps.
• Lead security policy rollouts (ATP, CAA, DLP) with minimal disruption.
• Assist in SOPs and handoff materials for government IT/SOC staff.

Skills

Google Workspace Admin

Chrome Enterprise

Policy design & enforcement

Security controls & ZTA

DoD/NIST compliance

Education

Bachelor's degree in Systems Engineering, Computer Science, or IT

Tools

Google Professional Cloud Architect

Google Associate Cloud Engineer

ChromeOS Administrator / Chrome Enterprise Specialist

CompTIA Security+ / CASP+

Job description

TIAG is now hiring a Google Workspace / Chrome Enterprise Engineer to support our team at the Uniformed Services University of Health Sciences (USUHS) in Bethesda, MD. This position requires a Secret Level clearance in order to start work. This position reports onsite in Bethesda in a hybrid capacity ( one day per week).The Google Workspace / Chrome Enterprise Engineer serves as a technical SME supporting the Uniformed Services University (USU) during a major operational transition. Key Responsibilities include:Configure CBCM cloud management policies, package enterprise browser extensions, and enroll 100% of managed enterprise devices.Contribute to the \"To-Be Architecture & Chrome Policy Design Document\" by creating detailed technical maps for browser rules (such as access limits and data protection) and providing written explanations if any specific Zero Trust requirements are technically impossible to implement.Enforce Context-Aware Access (CAA) policies on personal/BYOD devices accessing Agency applications and data.Build and configure security policies that specifically check exactly who the user is (identity) and whether their device is safe and compliant (device posture) before allowing them to open or use agency applications.Ensure all browser management and security configurations strictly follow mandatory federal guidelines, including FAR Part 39, Section 508 (accessibility), NIST 800-207, the DoD Zero Trust Reference Architecture (ZTRA), and internal agency cybersecurity rules.Lead iterative 4-phase rollout of Chrome Enterprise Premium security controls: Advanced Threat Protection (ATP), Context-Aware Access (CAA), and Data Loss Prevention (DLP).Ensure policy enforcement without disrupting mission-critical applications, validating zero Category I defects in the \"Implementation & Testing Report\".Assist in developing Standard Operating Procedures (SOPs) and operational handoff materials for government IT/SOC staff.Required Experience & Education:Bachelor's degree in Systems Engineering, Computer Science, or Information Technology.5+ years of enterprise systems engineering experience, specializing in Google Workspace Admin Console, Chrome Cloud Management, and enterprise browser security.Proven track record in GPO-to-cloud management migration and browser policy orchestration across multi-site federal/DoD enterprises.Recommended Credentials & Certifications:Google Professional Cloud Architect / Google Associate Cloud EngineerProfessional ChromeOS Administrator / Chrome Enterprise SpecialistCompTIA Security+ or CASP+ (CompTIA Advanced Security Practitioner)DoD 8140/8570 IAT Level II/III certificationTIAG is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a), and 41 CFR 60-741.5(a) and employment decisions shall be based solely on merit and without regard disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. TIAG takes proactive steps to employ and advance in employment qualified individuals without regard to disability or protected veteran status. The parties also agree that, as applicable, they will abide by the requirements and may be subject and required to take action pursuant to the following laws and accompanying regulations:The Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended (and its implementing regulations at 41 C.F.R. 60-300);Section 503 of the Rehabilitation Act of 1973, as amended (and its implementing regulations at 41 C.F.R 60-741); andExecutive Order 13496 (and its implementing regulations at 29 C.F.R. part 471, Appendix A to Subpart A).