Google Workspace Engineer

Tempus AI•Redwood City, CA

1d•$90,000 - $120,000

About The Position

Tempus is seeking a Google Workspace Engineer to support and engineer its digital workplace in a large-scale, complex enterprise environment. The role serves as a Tier 3 escalation point and technical expert for Google Workspace services—including Gmail, Drive, Meet, and Vault—and related third-party integrations. The engineer works with Information Security and IT to manage organizational units, security groups, access policies, Chrome devices, and Chrome browser policies, and to ensure new Workspace features are securely managed before release. Responsibilities also include automation, system-health and license-utilization monitoring, and management of Vault retention, eDiscovery, and compliance requirements such as HIPAA and GDPR. The role leads end-to-end migrations of email, calendars, and files from Microsoft platforms to Google Workspace, as well as complex Google-to-Google domain and tenant migrations. It includes planning migration analysis, data mapping, cutovers, and post-migration validation, and evaluating and managing migration tools to support data integrity and a smooth user experience. The expected salary range is $90,000–$120,000 for roles performed from California; compensation may vary for other listed locations and based on qualifications and experience. Tempus offers a range of benefits, which may include incentive compensation, restricted stock units, medical benefits, and other benefits depending on the position.

Requirements

3–5 years of hands-on experience as a Google Workspace Administrator or Engineer in a large-scale (5,000+ users), highly complex enterprise or multi-tenant environment.
Hands-on experience leading and executing full-scale migrations from Outlook/Exchange and SharePoint/OneDrive to Google Workspace.
Expertise in scripting and automation, such as Python, PowerShell, or Google Apps Script, for large-scale administrative and reporting tasks.
Deep knowledge of email protocols, including SMTP, DMARC, SPF, and DKIM.
Hands-on proficiency with Google Apps Manager (GAM) for user provisioning, group permissions, and bulk domain administration via CLI.
Exceptional problem-solving and communication skills, including the ability to troubleshoot complex issues and explain technical concepts to non-technical stakeholders.
Google Workspace Certified Administrator certification.

Nice To Haves

Experience administering cloud platforms such as Microsoft 365.
Familiarity with healthcare or life-sciences compliance frameworks such as HIPAA.
Experience with enterprise collaboration tools and integrations such as Slack and Atlassian.
Bachelor’s degree in Computer Science, Information Technology, or a related field.

Responsibilities

Serve as the Tier 3 escalation point and technical expert for Google Workspace services and related third-party integrations.
Partner with Information Security and IT to design, implement, and manage organizational units, security groups, and access policies across multiple domains and thousands of users.
Develop and manage administrative automation scripts using tools such as Google Apps Script, Python, and PowerShell.
Monitor system health, performance, and license utilization, and implement optimizations.
Manage Google Vault retention policies, eDiscovery requests, and compliance mandates such as HIPAA and GDPR.
Partner with Information Security and IT to manage Chrome devices and Chrome browser policies.
Work with Information Security and IT to secure and manage new Google Workspace features before rollout.
Lead end-to-end migrations of email, calendar, and file storage from Microsoft platforms, including Outlook/Exchange and SharePoint/OneDrive, to Google Workspace.
Manage and execute Google-to-Google domain and tenant migrations while protecting data integrity and user experience.
Create migration project plans covering pre-migration analysis, data mapping, cutover strategies, and post-migration validation.
Evaluate, implement, and manage enterprise migration tools, including GWMME and third-party solutions.