Principal, Enclave Systems & Support Administrator

Ingram Micro • Irvine, CA

3d • $133,400 - $226,800

About The Position

The Enclave Systems & Support Administrator designs, builds, hardens, and operates the technical enclave, configuring identity, endpoints, data-protection controls, and FIPS-validated cryptography while managing change. The role also provides tier-1 through tier-3 support, including endpoint provisioning, FIDO2 security-key management, least-privilege credential resets, and end-user onboarding and training through migration and steady-state operations.

The position administers Google Workspace Enterprise Plus, builds and operates ChromeOS/Chrome Enterprise endpoints and Amazon WorkSpaces Windows VDI in AWS GovCloud, configures SAML SSO and phishing-resistant FIDO2 authentication, and maintains hardened baselines. It runs documented, tested, and approved change processes; develops automation; maintains backup and restore; and produces configuration evidence for control assessments and C3PAO/KPMG reviews.

The role is a full-time exempt position based in the U.S., with occasional travel for assessments and audits. Work is during standard business hours, with a scheduled on-call rotation for after-hours Sev1/2 escalation. Extended hours may be needed during active incidents or the C3PAO assessment window. U.S. citizenship is required, and the employee must pass company screening and complete specified security training before access.

Requirements

• 7+ years of experience, including 5+ years administering Google Workspace Enterprise Plus or an equivalent platform at scale, with direct end-user/service-desk support experience.
• Bachelor's degree or higher in cybersecurity, computer science/engineering, management information systems, or a similar field.
• Hands-on experience with AWS (GovCloud preferred), Amazon WorkSpaces/VDI, and Chrome Enterprise, including administration, provisioning, and support.
• Strong identity experience with SAML SSO, FIDO2/WebAuthn, conditional or context-aware access, and MFA/hardware-key lifecycle management.
• Experience with configuration baselines, hardening, and disciplined change management.
• Scripting and automation skills.
• Backup/restore and operational resilience experience.
• Strong customer-service skills and disciplined ticket and asset documentation practices.
• U.S. citizenship.
• Ability to pass Ingram Micro background screening and complete CUI-handling, insider-threat, and incident-handling training before access.
• Ability to comply with least-privilege access controls and periodic access recertification.
• Ability to pass a drug test and pre-employment background check.

Nice To Haves

• Google Workspace Administrator certification.
• AWS SysOps Administrator or AWS Security Specialty certification.
• CompTIA Security+ and/or CompTIA A+ certification.
• AWS GovCloud experience.

Responsibilities

• Administer Google Workspace Enterprise Plus, including Cloud Identity, organizational-unit design, custom admin roles, DLP, Drive labels and IRM, trust rules, and mail compliance.
• Build and operate ChromeOS/Chrome Enterprise endpoints and Amazon WorkSpaces Windows VDI in AWS GovCloud.
• Configure SAML SSO with FIDO2 phishing-resistant authentication and Context-Aware Access policies.
• Establish and maintain hardened configuration baselines and enforce FIPS-mode cryptography across data states.
• Document, test, and approve configuration changes against the baseline and SSP.
• Develop scripting and automation for provisioning, configuration, and reporting; maintain backup and restore.
• Produce configuration evidence for control assessments and C3PAO/KPMG reviews.
• Provide tier-1 through tier-3 service desk support, including least-privilege, fully logged password and MFA resets.
• Provision and manage endpoints and MDM for Chromebook/Chrome Enterprise devices.
• Issue, inventory, track, and manage the lifecycle and replacement of FIDO2 security keys, with two keys per user.
• Lead user onboarding, joiner-mover-leaver actions, and migration of users and data into the enclave.
• Deliver end-user security-awareness and CUI-handling training.
• Maintain security hygiene through patch verification, asset tracking, and ticket documentation.
• Escalate significant security events to the ISSO and Security Operations Lead in accordance with incident-response runbooks.

Benefits

• Healthcare benefits
• Paid time off
• Parental leave
• 401(k) plan and company match
• Short-term and long-term disability coverage
• Basic life insurance
• Wellbeing benefits
• Potential merit increases, annual bonus or sales incentives, and long-term incentives for eligible roles

What This Job Offers

• Job Type: Full-time
• Career Level: Principal