Google Workspace Security Subject Matter Expert

Role Overview

We are seeking a Google Workspace Security Subject Matter Expert (SME) to lead a comprehensive security analysis and optimization project for a Google Workspace for Education Plus environment.

The successful candidate will evaluate the current infrastructure, with a primary focus on Gmail and Google Drive configurations, to identify vulnerabilities, mitigate phishing and credential harvesting risks, and deliver a roadmap of actionable security best practices. The ideal engineer balances deep technical mastery of the Google Admin Console with an understanding of enterprise identity security to prevent account takeovers and internal spam outbreaks.

Key Responsibilities

• Security Assessment: Conduct a thorough audit of the Google Workspace for Education Plus tenant via the Google Admin Console, analyzing current configurations against industry best practices.
• Email & Drive Optimization: Review and harden Gmail settings (including
• SPF, DKIM, DMARC
• , compliance routing, and advanced anti-phishing rules) and Google Drive settings (including external sharing policies, link defaults, and
• Data Loss Prevention (DLP) rules).
• Identity & Access Remediation: Evaluate the existing mandatory Multi-Factor Authentication (MFA) framework and design a transition plan toward phishing-resistant MFA
• (e.g., FIDO2 security keys, Passkeys) and
• Context-Aware Access (CAA) policies.
• Incident Analysis Support: Analyze recent account compromise patterns, investigate session hijacking methodologies, and recommend automated controls to detect and block internal spam blasts.
• Strategic Roadmap: Deliver a comprehensive, prioritized findings report detailing immediate remediation steps, medium-term configurations, and long-term security governance recommendations tailored for an educational environment.
• Required Skills & Qualifications
• Technical Expertise
• ·
• Google Workspace Administration: Expert-level knowledge of Google Workspace for Education Plus architecture, Organizational Units (OUs), and administrative role delegation.
• ·
• Email Security Engineering: Deep proficiency in anti-spoofing protocols (
• SPF, DKIM, DMARC
• ), inbound/outbound content filters, and bulk mail mitigation techniques.
• ·
• Zero-Trust & Identity Access Management: Proven experience deploying
• Context-Aware Access (CAA) rules and transitioning organizations to phishing-resistant 2-Step Verification (2SV).
• ·
• Security Analytics & Forensics: Mastery of the Google Workspace
• Investigation Tool
• , Alert Center, and log analysis to track credential harvesting and anomalous user behavior.
• Experience & Education
• ·
• Minimum 3–5 years of hands-on experience auditing, hardening, and securing large-scale Google Workspace environments.
• ·
• Education Sector Experience: Familiarity with the unique operational workflows and privacy landscapes (e.g., FERPA compliance) of educational institutions is highly preferred.
• ·
• Certifications: o
• Required: Google Cloud Professional Google Workspace Administrator o
• Highly Desirable: Google Cloud Professional Security Engineer

Pay Range

: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at ELEVI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities.

Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At ELEVI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.

The proposed salary range for this position is:

$75,400 - $110,300

We’re an equal opportunity employer (EOE) that empowers our people. It is the policy of ELEVI to provide equal employment opportunities to all employees and employment applicants—without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws.

We fearlessly drive change, because without diversity of thought and a commitment to equality for all, there is no moving forward. Reasonable accommodations are available for qualified individuals with disabilities, upon request. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training,