Google Workspace Security Subject Matter Expert

ELEVI; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive compensation

Benefits package

Learning & development opportunities

Job summary

ELEVI seeks an expert Google Workspace for Education Plus security professional to audit and harden a large education tenant. You will design phishing-resistant MFA, review SPF/DKIM/DMARC, and optimize Drive sharing policies.

You'll deliver prioritized remediation steps and governance recommendations, focusing on FERPA-compliant privacy and scalable security controls for a dynamic U.S. education environment.

Experience with incident detection and governance frameworks is a plus.

Qualifications

• Expert-level knowledge of Google Workspace for Education Plus architecture and admin role delegation.
• Deep proficiency in SPF, DKIM, and DMARC anti-spoofing controls.
• Proven experience deploying Context-Aware Access (CAA) rules.
• Mastery of the Google Workspace Investigation Tool and Alert Center.
• 3–5 years auditing and securing large Google Workspace environments.
• Google Cloud Professional Google Workspace Administrator certification is required.
• Desirable: CISSP or CISM certifications, FERPA familiarity.

Responsibilities

• Audit Google Workspace for Education Plus via Google Admin Console.
• Review and harden Gmail settings (SPF, DKIM, DMARC).
• Optimize Drive sharing policies and DLP rules.
• Design transition plan toward phishing-resistant MFA and CAA.
• Analyze account compromise patterns and suggest automated controls.
• Deliver a findings report with remediation steps and governance recommendations.

Skills

Workspace security architecture

SPF/DKIM/DMARC anti-spoofing

CAA deployment

Google Admin Console proficiency

Investigation Tool & Alert Center

3–5 years auditing large Google Worksp

Google Cloud Professional Workspace 5

FERPA familiarity

Education

Google Cloud Professional Google Workspace Administrator certification

CISSP

CISM

Tools

Google Admin Console

Google Workspace Investigation Tool

Alert Center

CAA configuration

Job description

Responsibilities

• Conduct a thorough audit of the Google Workspace for Education Plus tenant via the Google Admin Console


• Review and harden Gmail settings including SPF, DKIM, and DMARC


• Optimize Google Drive settings including external sharing policies and DLP rules


• Design a transition plan toward phishing-resistant MFA and Context-Aware Access (CAA) policies


• Analyze account compromise patterns and recommend automated controls to detect internal spam


• Deliver a prioritized findings report with remediation steps and security governance recommendations

Requirements

• Expert-level knowledge of Google Workspace for Education Plus architecture and administrative role delegation


• Deep proficiency in anti-spoofing protocols (SPF, DKIM, DMARC)


• Proven experience deploying Context-Aware Access (CAA) rules


• Mastery of the Google Workspace Investigation Tool and Alert Center


• Minimum 3-5 years of hands-on experience auditing and securing large-scale Google Workspace environments


• Required: Google Cloud Professional Google Workspace Administrator certification


• Highly Desirable: Google Cloud Professional Security Engineer, CISSP, or CISM


• Familiarity with educational sector workflows and privacy landscapes (e.g., FERPA)

About the Company

ELEVI offers competitive compensation, benefits, and learning and development opportunities designed to support and protect employees and their families.