Sr. Google Workspace Engineer

The role

We are hiring a senior Google Workspace engineer to become the internal technical owner of DDN's collaboration environment. This engineer will drive the Google Workspace, take the service through hypercare, and own its ongoing administration, security, reliability, and advanced support. This hands-on role will work closely with IAM, Security, the Service Desk, and the Digital Workplace team.

What you’ll do

Workspace engineering and service ownership

• Administer and improve Gmail, Drive and Shared Drives, Calendar, Meet, Groups and other core Workspace services, including organizational units, admin roles, policies, domains and licensing.

• Own email configuration and troubleshooting, including routing, aliases, delegated access, SMTP, DNS, MX, SPF, DKIM and DMARC.

• Set sensible standards for sharing, data ownership, storage, groups, access and collaboration without creating unnecessary friction for employees.

• Monitor service health and changes, manage high-severity escalations, and maintain support documentation, operational runbooks and release controls.

Migration, transition and integrations

• Serve as the internal engineering lead for the partner-run transition of mail, calendars and files; validate migration results and close gaps identified during go-live and hypercare.

• Support the move from Teams meetings to Google Meet and the planned retirement of Microsoft 365 mail, OneDrive and SharePoint services, including coexistence and user-impact issues.

• Partner with IAM on SSO, provisioning, joiner/mover/leaver changes and access for Windows, Mac and mobile users; support integrations with Slack and enterprise applications.

• Build practical automation using Google Workspace APIs, Apps Script, Python, GAM or similar tools for administration, reporting and account lifecycle tasks.

Security, compliance and technical leadership

• Configure and maintain security controls for administrative access, MFA/SSO integrations, data loss prevention, external sharing, OAuth app access and audit logging.

• Administer Google Vault retention and holds with Legal and Compliance, and provide technical evidence for audits and access reviews.

• Support the Principal Architect and AI platform owners on secure Gemini Enterprise access to Workspace data; own Workspace configuration.

• Coach support engineers, document standards, and work with Google or vendors on complex production issues.

What we’re looking for

• 7+ years in IT infrastructure or collaboration engineering, including 3+ years administering Google Workspace in a production enterprise environment.

• Deep hands-on knowledge of Gmail, Drive/Shared Drives, Calendar, Meet, Groups, and the Google Workspace Admin Console.

• Strong knowledge of mail flow, DNS, and authentication standards (SPF, DKIM, DMARC), permissions, and shared data governance.

• Experience with SSO, IAM integrations, Google Vault, audit logging, and security controls across Workspace.

• Ability to troubleshoot complex migrations, production incidents, integration issues, and employee-impacting problems.

• Useful scripting or API experience and the discipline to document, test, and safely deploy changes.

Helpful experience

• Experience with Microsoft 365-to-Google Workspace migrations, Google Meet transition or coexistence.

• Google Workspace administration certification or experience supporting SOC 2/ISO 27001 audit requirements.

• Experience integrating Workspace with Okta or another enterprise identity provider.

Initial priorities: Support the final migration waves and hypercare, establish sustainable in-house Workspace operations, and close dependencies for Microsoft mail and file-service retirement.