This role involves managing and administering Google Workspace, implementing security, automation, and DLP efforts, and leading complex projects in the organization.
About Lyra Health
Lyra Health is the leading provider of mental health solutions for employers supporting more than 20 million people globally. The company has delivered 13 million sessions of mental health care, published more than 20 peer-reviewed studies, and delivered unmatched outcomes in terms of access, clinical effectiveness and cost efficiency. Extensive peer-reviewed research confirms Lyra’s transformative care model helps people recover twice as fast and results in a 26% annual reduction in overall healthcare claims costs. Lyra is transforming access to life-changing mental health care through Lyra Empower, the only fully integrated, AI-powered platform combining the highest-quality care and technology solutions.
About the Role:
We are looking for a talented and tenured Google Workspace Administrator to act as the primary technical expert for our Google Workspace environment. This critical role involves advanced administration, configuration, security, and automation to ensure a secure, optimized, and compliant cloud-based operation. Along with Google Workspace expertise, this specialist will drive various DLP and security ops efforts.
Remote candidates must be physically located within the United States.
Responsibilities
- Google Workspace Administration & Automation
- Serve as the Tier 3 administrator and escalation point for all aspects of Google Workspace, managing complex configurations, security settings, and Organizational Units (OUs).
- Manage the full user lifecycle (provisioning, de-provisioning) across the GWS domain.
- Demonstrate deep, hands-on expertise in the entire GWS suite, including the Security Center, Investigation Tool, Google Vault, and Audit Logs.
- Develop and implement automation solutions using Google Apps Script (GAS) and/or Google Cloud Platform (GCP) services (e.g., Cloud Functions) to streamline provisioning, reporting, and administrative workflows.
- Implement and manage advanced security controls, including Context-Aware Access (CAA), advanced phishing/malware protection, and secure data sharing policies.
- Utilize GWS Audit Logs for security monitoring, compliance, and internal investigations.
- Provide advanced technical support for all end-user issues related to core Google Workspace services.
- Third-Party App Governance: Responsibility for vetting and managing OAuth tokens and third-party marketplace apps to prevent data exfiltration.
- Project Management: Proven ability to lead complex projects, such as domain consolidations, tenant-to-tenant migrations, or global security hardening initiatives.
- eDiscovery & Security Operations
- Lead and execute security and HR-mandated internal investigations using the Google Workspace Investigation Tool for complex data searches across Drive, Gmail, and Chat.
- Manage eDiscovery and Legal Hold processes using Google Vault, ensuring chain-of-custody for evidentiary purposes and exporting compliant data sets.
- Develop and deliver security awareness training focused on safe data handling and proper use of Google Workspace tools.
- DLP (Data Loss Prevention): Designing and maintaining DLP rules for Drive and Gmail to protect PII/PHI.
- Chrome Browser Management: Managing Chrome at the enterprise level (profiles, extensions, and security policies).
- Mobile Device Management (MDM): Overseeing Google Endpoint Management for mobile and laptop devices.
- Establish and maintain Shared Drive governance, including naming conventions, membership lifecycle, and external sharing restrictions.
- Develop long-term storage optimization strategies to balance user productivity with organizational costs.
Qualifications
- Expert-level proficiency in administering and securing Google Workspace (Enterprise/Plus features).
- Professional Google Workspace Administrator Certification preferred.
- CLI Tools: Mastery of GAM/GAM7 for command-line administration.
- Strong experience with the Google Workspace Admin Console for managing users, services, security settings, and OUs.
- Architect-level experience with Google Cloud Identity and integrating GWS with external identity providers (IdP) via SAML/OAuth.
- Directory Sync: Experience with Google Cloud Directory Sync (GCDS) or Azure AD/Okta provisioning.
- Proficiency in Google Apps Script (GAS) or other scripting languages for administrative automation.
- Familiarity with general cloud computing concepts and the Google Cloud ecosystem.
- Solid understanding of security protocols, data privacy, and the ability to maintain the security of the Google Workspace domain.
- Experience with large-scale GWS deployments, migrations, and hybrid environments.
"We are an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy), national origin, age, disability, genetic information or any other category protected by law.
By applying for this position, you acknowledge that your personal information will be processed as per the Lyra Health Workforce Privacy Notice. Through this application, to the extent permitted by law, we will collect personal information from you including, but not limited to, your name, email address, gender identity, employment information, and phone number for the purposes of recruiting and assessing suitability, aptitude, skills, qualifications, and interests for employment with Lyra. We may also collect information about your race, ethnicity, and sexual orientation, which is considered sensitive personal information under the California Privacy Rights Act (CPRA) and special category data under the UK and EU GDPR. Providing this information is optional and completely voluntary, and if you provide it you consent to Lyra processing it for the purposes as described at the point of collection, for example for diversity and inclusion initiatives. If you are a California resident and would like to limit how we use this information, please use the Limit the Use of My Sensitive Personal Information form. This information will only be retained for as long as needed to fulfill the purposes for which it was collected, as described above. Please note that Lyra does not “sell” or “share” personal information as defined by the CPRA. Outside of the United States, for example in the EU, Switzerland and the UK, you may have the right to request access to, or a copy of, your personal information, including in a portable format; request that we delete your information from our systems; object to or restrict processing of your information; or correct inaccurate or outdated personal information in our systems. These rights may be subject to legal limitations. To exercise your data privacy rights outside of the United States, please contact [email protected]. For more information about how we use and retain your information, please see our Workforce Privacy Notice."
Top Skills
Azure Ad
Gam/Gam7
Google Apps Script
Google Cloud Directory Sync
Google Cloud Identity
Google Cloud Platform
Google Vault
Google Workspace
Okta
Similar Jobs
Big Data • Information Technology • Software • Analytics • Energy
Drive enterprise sales in power and renewables by building C-suite relationships, leading consultative pursuits, aligning Enverus SaaS solutions to customer strategy, managing pipeline (3.5x quota), creating business cases/ROI, closing deals, and maintaining sales data and reports.
Top Skills:
AccessExcelMicrosoft WordOutlookPowerPointSaaS
Aerospace • Cloud • Digital Media • Information Technology • Mobile • News + Entertainment • Generative AI
Handle 100% inbound customer calls to retain and upsell EchoStar TV, internet, and wireless products. Meet quotas in a fast-paced environment, maintain strong customer relationships, and follow company processes. Work full-time from a home office in Florida (excluding Miami and Boca Raton) with required equipment and pass pre-employment screening.
Top Skills:
2+ MonitorsBoost MobileDish TvSling TvSmartphoneUsb Keyboard/Mouse/HeadsetWebcamWired Internet (25 Mbps Download/2 Mbps Upload)
Aerospace • Cloud • Digital Media • Information Technology • Mobile • News + Entertainment • Generative AI
Handle 100% inbound customer calls to sell EchoStar TV, internet, and wireless products using a consultative approach. Meet quotas, build customer relationships, and work flexible hours. Promote retention and revenue while following company policies and completing pre-employment screening.
Top Skills:
HeadsetMulti-Monitor SetupSmartphoneUsb KeyboardUsb MouseWebcamWired Internet
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
