Google Workspace Security Subject Matter Expert

Role overview A consulting engagement to lead a comprehensive security assessment and optimization of a Google Workspace for Education Plus environment. The focus is on Gmail and Google Drive configurations, identifying vulnerabilities, mitigating phishing and credential harvesting risks, and producing a prioritized roadmap. The work blends deep Admin Console expertise with enterprise identity security practices suited to an education setting.

Responsibilities - Conduct a thorough audit of the Google Workspace for Education Plus tenant via the Admin Console, comparing current configurations against industry best practices. - Review and harden Gmail settings including SPF, DKIM, DMARC, compliance routing, and advanced anti-phishing rules, plus Drive settings such as external sharing, link defaults, and DLP rules. - Evaluate the existing mandatory MFA framework and design a transition plan toward phishing-resistant MFA options such as FIDO2 security keys and Passkeys, plus Context-Aware Access policies. - Analyze recent account compromise patterns, investigate session hijacking techniques, and recommend automated controls to detect and block internal spam blasts. - Deliver a prioritized findings report with immediate remediation steps, medium-term configurations, and long-term security governance recommendations tailored to an educational environment.

Requirements - Expert-level knowledge of Google Workspace for Education Plus architecture, Organizational Units, and administrative role delegation. - Deep proficiency in SPF, DKIM, and DMARC anti-spoofing protocols, inbound and outbound content filters, and bulk mail mitigation. - Proven experience deploying Context-Aware Access rules and transitioning organizations to phishing-resistant 2-Step Verification. - Mastery of the Workspace Investigation Tool, Alert Center, and log analysis for credential harvesting and anomalous behavior. - Three to five years of hands-on experience auditing and hardening large-scale Google Workspace environments, with education sector familiarity preferred. - Google Cloud Professional Google Workspace Administrator certification required; Professional Security Engineer, CISSP, or CISM highly desirable. - Strong technical consulting skills, with the ability to translate complex findings into plain-language executive recommendations.

Benefits and work setup - Proposed salary range of $75,400 to $110,300, influenced by location, contract labor categories, prior experience, skills, and certifications. - Competitive compensation and benefits package including healthcare, wellness, financial, retirement, family support, continuing education, and time off. - Flexibility-oriented culture that supports balance between quality work and personal life, with reasonable accommodations available.