Google Workspace Subject Matter Expert
About The Position
The Google Workspace Subject Matter Expert supports the U.S. Holocaust Memorial Museum (USHMM), working directly for the Museum's lead system administrator. The Museum has approximately 6–8 Google administrators who handle day-to-day platform support; this role serves as the authoritative technical expert above that team. Its focus is maintaining the environment, owning and reviewing Workspace architecture, optimizing solutions within the platform, and coordinating with other teams at integration points. The position is hybrid and requires approximately 50% on-site work in Washington, DC. The role owns Workspace architecture and administration across the Museum's domains and core services, including Gmail, Drive, Docs, Sheets, Slides, Forms, Meet, Chat, and Calendar. It leads tenant optimization, storage and license right-sizing, governance, records management, compliance, and Workspace-native security configuration. It also supports Gemini for Workspace and NotebookLM for internal use. The SME coordinates integrations with platforms administered by separate vendors or contracts—including Okta, the CASB, ServiceNow, Jamf, Google MDM, and Endpoint Central—but does not administer or license Okta, the CASB, or ServiceNow. The role provides technical leadership, training, documentation, and support across all tiers. Coverage is during business hours; minimal after-hours response is required for critical outages, with tracked hours offset by time off.
Requirements
- Current and in-good-standing Google Workspace Administrator Professional certification or Associate Google Workspace Administrator certification.
- Demonstrated subject-matter-expert-level experience administering Google Workspace at enterprise scale, including environments with hundreds to 1,000+ users and complex organizational-unit, group, and shared-drive structures.
- Experience supporting NIST-, FISMA-, and FedRAMP-aligned environments.
- Ability to obtain Public Trust suitability and pass an OPM fingerprint criminal check with credit/financial review.
- Ability to work the hybrid on-site schedule in Washington, DC, approximately 10 days per month.
Nice To Haves
- Google Cloud Certified — Professional Cloud Security Engineer certification.
- Google Cloud Certified — Professional Cloud Architect certification.
- Google Vault, eDiscovery, and federal records-management experience, including FOIA and NARA.
- Okta SSO/SAML integration experience.
- ServiceNow workflow familiarity.
- Scripting and automation experience using GAM, Python, or Bash.
- Prior federal agency experience.
Responsibilities
- Own and continuously review Google Workspace architecture; recommend and implement improvements.
- Optimize the Workspace tenant, including configuration, organizational-unit structure, groups, shared drives, storage, and license allocation.
- Evaluate new Workspace features for Museum applicability and maintain a continuous-improvement roadmap.
- Administer all domains and core services, including Gmail, Drive, Docs, Sheets, Slides, Forms, Meet, Chat, and Calendar.
- Manage users, groups, organizational units, and role-based access controls.
- Own Workspace identity lifecycle processes for onboarding, role changes, and offboarding.
- Stand up and support Gemini for Workspace and NotebookLM for internal Museum use.
- Establish and enforce Workspace governance policies, standards, documented procedures, and records-management practices.
- Administer Google Vault and support indefinite retention, eDiscovery, and NARA/M-19-21 records-management obligations.
- Maintain alignment with NIST CSF, NIST SP 800-53, and FISMA, and support migration toward FedRAMP Moderate.
- Support obligations involving federal PII treated as CUI, the State Privacy Act, PCI, and HIPAA.
- Maintain documentation and evidence for audits, assessments, and ATO activities.
- Configure and enforce Workspace-native security controls, including MFA, password and session policies, device trust, secure sharing, and IRM.
- Monitor security alerts and respond to phishing, account compromise, and unauthorized access.
- Configure Workspace-side DLP controls in coordination with the CASB vendor.
- Maintain SSO and identity-federation integration with Okta as the identity source of truth.
- Coordinate DLP policy alignment with the CASB vendor and endpoint/mobile policy with Jamf, Google MDM, and Endpoint Central owners.
- Work incidents, changes, and requests through ServiceNow workflows; coordinate with Google support and escalation channels.
- Serve as the escalation point and technical authority for the Museum's 6–8 Google administrators.
- Provide technical training, best-practice guidance, and knowledge transfer to Museum staff.
- Author SOPs, runbooks, operational documentation, and incident-response procedures; provide support across all tiers as needed.
- Perform routine health checks, configuration reviews, and change management to minimize disruption; respond to incidents, outages, and escalations.
- Produce monthly status reports and deliver governance, administration, security, access-control, compliance, operational, and user-lifecycle documentation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
