IT Administrator (Google Workspace & Rippling)

Concierge Auctions

1d•Remote

About The Position

Concierge Auctions is seeking an IT Administrator to manage core internal systems, primarily Google Workspace and Rippling. This role serves as the main point of contact for employee technology needs, including account management, device support, access control, and troubleshooting. A key responsibility will be contributing to a strategic initiative to build a unified access control layer across all company applications and systems, involving system inventory, defining role-based access standards, consolidating identity management, and automating access provisioning and revocation. This is a hands-on position for someone with 1-3 years of IT support or systems administration experience who is eager to take ownership of a modern, cloud-first technology stack and gain exposure to identity and access management (IAM) architecture.

Requirements

1–3 years of experience in IT support, helpdesk, or systems administration
Hands-on experience administering Google Workspace (users, groups, security settings, admin console)
Experience with an HRIS or IT lifecycle platform — Rippling strongly preferred (Gusto, Justworks, BambooHR, or Okta/JumpCloud experience considered)
Working knowledge of macOS and Windows support, plus basic networking (DNS, DHCP, VPN, Wi-Fi)
Comfort with SaaS app administration, SSO, and role-based permission models
Genuine interest in identity and access management, and the patience to do the inventory, documentation, and cleanup work that a real access control program requires
Clear written and verbal communication; able to explain technical topics to non-technical staff
Strong organizational habits, discretion with confidential data, and a bias toward documentation

Nice To Haves

Google Workspace Administrator certification or CompTIA A+ / Network+
Experience supporting a fully remote or hybrid workforce
Familiarity with MDM tooling, endpoint security, or device compliance programs
Basic scripting or automation experience (Apps Script, Python, or similar) and comfort working with app APIs or SCIM provisioning
Exposure to IAM tooling (Okta, JumpCloud, Entra ID) or to SOC 2 / access review and audit processes
Exposure to Slack, Zoom, Notion, Salesforce, or Atlassian administration

Responsibilities

Manage users, groups, organizational units, and aliases in the Google Admin console.
Administer Gmail, Drive, shared drives, Calendar, Meet, and Groups settings.
Enforce security policies: 2-step verification, app access controls, third-party OAuth review, and device management.
Monitor admin audit and login reports; investigate suspicious activity and respond to phishing reports.
Manage license assignment and storage usage; handle data retention, exports, and account transfers on departures.
Maintain employee records, org structure, and role-based permissions in Rippling.
Build and run onboarding and offboarding workflows, including app provisioning and de-provisioning.
Administer app management and SSO connections for third-party tools.
Support device inventory, enrollment, and MDM policies through Rippling.
Partner with HR and Finance on employee lifecycle changes, reporting, and app spend visibility.
Build and maintain a complete inventory of applications, systems, and data stores, including owners, sensitivity, and current access methods.
Help define a role-based access control (RBAC) model that maps job roles and departments to standardized permission sets.
Consolidate authentication behind SSO where possible; document exceptions and plan remediation for systems that cannot integrate.
Implement automated provisioning and de-provisioning so access follows the employee lifecycle (hire, transfer, promote, depart) without manual steps.
Build recurring access review workflows and produce evidence that reviews were completed.
Instrument logging and alerting for privileged access, permission changes, and anomalous sign-ins.
Document access policies, request and approval paths, and break-glass procedures; keep them current in Notion.
Track and report on progress: systems covered, percentage behind SSO, orphaned accounts closed, average time to provision and de-provision.
Serve as first-line support for hardware, software, account, and access requests.
Track, prioritize, and resolve tickets within agreed response targets; escalate when needed.
Prepare, image, ship, and recover laptops and peripherals for a distributed workforce.
Maintain accurate asset inventory and license records.
Write and maintain internal documentation, how-to guides, and IT onboarding materials in Notion.
Support conference room A/V, VPN, printers, and other office technology as needed.
Apply least-privilege access principles across all managed systems.
Run periodic access reviews and confirm timely removal of departed users.
Assist with security awareness reminders and incident response tasks.
Follow documented change and approval procedures for policy or permission changes.