Google Workspace Administrator

Job details:Role: Google Workspace AdministratorLocation: Hybrid —Washington, DCPeriod of Performance: 12+ Months Contract

Learn more about the general tasks related to this opportunity below, as well as required skills.
Clearance: Public Trust suitability + OPM FBI fingerprint criminal background check with financial/credit review; re-screened annually
Role Summary:As an US Citizen , you gace to work as a Google Workspace Administrator, who will be the single dedicated full-time resource responsible for administering, governing, and optimizing USHMM's entire Google Workspace tenant. This person is the primary point of contact for all Workspace-related activity — configuring the platform to meet business, security, and compliance requirements, and providing technical training and documentation to the Museum's existing team of roughly 6–8 Google administrators. This is a senior individual-contributor role: the person owns the environment end to end and works across all support tiers depending on the problem, not just Tier 3.
Environment You'll Be AdministeringThis is a large, mature enterprise tenant — not a small shop. Scope includes:~902 active users (925 provisioned), 22 organizational units, 653 groups1,294 shared drives, 23.5 TB Drive storage, ~47 TB total footprint908 Workspace licenses, 1,743 archived-user licenses, 26 Google Voice licenses40 privileged administrators to coordinate with and govern1 primary domain, 2 secondary domains/aliasesOkta as the identity source of truth (SSO/MFA already in place)ServiceNow for ticketing, change, and incident workflowJamf (Apple), Google MDM (mobile), Endpoint Central (everything else)Third-party CASB for DLP; Google Vault with indefinite retentionCommercial Workspace tenant, with an active initiative to move toward FedRAMP Moderate
Core Responsibilities:Platform Administration & Account ManagementAdminister all Workspace domains and services as primary ownerManage users, groups, OUs, and role-based access controlsOwn identity lifecycle: onboarding, role changes, offboardingManage licensing, subscriptions, and cost/storage optimization (Drive storage and license right-sizing are named priorities)
Core Service ManagementAdminister and optimize Gmail, Drive, Docs/Sheets/Slides/Forms, Meet, Chat, and CalendarStand up and support Gemini for Workspace and NotebookLM for internal Museum use
Security & Access ControlsEnforce MFA for all users, mandatory for privileged accountsConfigure and maintain SSO/identity federation via OktaEnforce password, session-control, and device-trust policiesManage DLP, IRM, and secure-sharing controls in coordination with the CASBMonitor security alerts; respond to phishing, account compromise, and unauthorized accessCompliance & Risk ManagementMaintain alignment with NIST CSF, NIST SP 800-53, and FISMASupport the migration toward FedRAMP Moderate consistent with Museum directionMaintain documentation and evidence supporting audits, assessments, and ATO activitiesUnderstand that federal PII is treated as CUI, with State Privacy Acts, PCI, and HIPAA also in scope, and NARA/M-19-21 records-management requirements in effect
Operations & MaintenanceRoutine health checks, configuration reviews, and policy/feature updatesChange management to minimize disruption; incident, outage, and escalation responseAfter-hours/weekend response for critical or mission-critical outages (normal coverage is business hours)
Planning & OptimizationLead strategic planning for Workspace adoption; maintain a continuous-improvement roadmapEvaluate new features for Museum applicability; recommend automation and UX improvements
Stakeholder Coordination & TrainingServe as liaison among Museum leadership, IT, program offices, and Google supportProvide technical training and best-practice guidance to the Museum's Google administrators and broader community
Deliverables the Person OwnsGovernance/administration documentation, security and access-control policies, NIST/FISMA/FedRAMP-aligned compliance documentation, operational runbooks and incident-response procedures, user lifecycle procedures, and monthly status reports.
Required Qualifications:Google Workspace Administrator Professional certification, current and in good standing — this is mandatory, not preferred. No exceptions; a candidate without it is non-compliant. xzbcwsv Hands-on experience administering Google Workspace at large enterprise or federal/federal-adjacent scale (hundreds to ~1,000 users, complex OU/shared-drive structures)Strong identity management, MFA, and zero-trust fundamentals; direct Okta experience strongly desiredExperience supporting NIST-, FISMA-, and FedRAMP-aligned environmentsAble to obtain Public Trust suitability and pass an OPM fingerprint criminal check with credit/financial reviewU.S. citizenship or work authorization; able to work onsite in Washington, DC on a hybrid schedule (~10 onsite days/month, five every two weeks)
Preferred Qualifications:Google Cloud Certified — Professional Cloud Security EngineerGoogle Cloud Certified — Professional Cloud ArchitectServiceNow, Jamf, Endpoint Central, and CASB/DLP tooling familiarityExperience with Google Vault retention and NARA records-management requirements