IT Administrator (Google Workspace & Rippling)

WHO WE ARE: The world’s finest art, automobiles, and antiques are sold at auction—so too is luxury real estate. Enter the smart way to buy and sell luxury properties. Our expert team curates the world’s finest properties, matches them with the most capable property connoisseurs from across the globe, and facilitates easy, market-driven transactions. Since 2008, we have closed over $5B in luxury properties, with the typical sale ranging between $2.5M and $30M—and are dominating the $20M-plus industry. Our business has spanned the globe, including 46 US states and 38 countries, and we host a database of nearly 1 billion global contacts. Majority owned by Sotheby’s, the world’s premier destination for fine art and luxury goods, and Compass (NYSE: COMP), Concierge Auctions continues to operate independently, partnering with real estate agents affiliated with many of the industry’s leading brokerages to host luxury property auctions for clients. ROLE OVERVIEW: Concierge Auctions is hiring an IT Administrator to own the day-to-day administration of our core internal systems, with a primary focus on Google Workspace and Rippling . This person is the first point of contact for employee technology needs — accounts, devices, access, and everyday troubleshooting — and keeps onboarding and offboarding running smoothly and securely. Beyond day-to-day administration, this role is a direct partner on a strategic initiative: building a unified access control layer across all Concierge Auctions applications and systems. Working alongside our technology lead, this person will help inventory every system we use, define role-based access standards, consolidate identity and provisioning, and automate how access is granted, reviewed, and revoked across the company. This is a hands-on, execution-focused role well suited to someone with 1–3 years of IT support or systems administration experience who wants ownership of a modern, cloud-first stack and real exposure to identity and access management (IAM) architecture. Google Workspace administration Manage users, groups, organizational units, and aliases in the Google Admin console Administer Gmail, Drive, shared drives, Calendar, Meet, and Groups settings Enforce security policies: 2-step verification, app access controls, third-party OAuth review, and device management Monitor admin audit and login reports; investigate suspicious activity and respond to phishing reports Manage license assignment and storage usage; handle data retention, exports, and account transfers on departures Rippling administration Maintain employee records, org structure, and role-based permissions in Rippling Build and run onboarding and offboarding workflows, including app provisioning and de-provisioning Administer app management and SSO connections for third-party tools Support device inventory, enrollment, and MDM policies through Rippling Partner with HR and Finance on employee lifecycle changes, reporting, and app spend visibility Access control layer (major initiative) This person will work directly with our technology lead to design, build, and operate a company-wide access control layer. Expect roughly 30–40% of the role to be dedicated to this initiative. Build and maintain a complete inventory of applications, systems, and data stores, including owners, sensitivity, and current access methods Help define a role-based access control (RBAC) model that maps job roles and departments to standardized permission sets Consolidate authentication behind SSO where possible; document exceptions and plan remediation for systems that cannot integrate Implement automated provisioning and de-provisioning so access follows the employee lifecycle (hire, transfer, promote, depart) without manual steps Build recurring access review workflows and produce evidence that reviews were completed Instrument logging and alerting for privileged access, permission changes, and anomalous sign-ins Document access policies, request and approval paths, and break-glass procedures; keep them current in Notion Track and report on progress: systems covered, percentage behind SSO, orphaned accounts closed, average time to provision and de-provision End-user support and IT operations Serve as first-line support for hardware, software, account, and access requests Track, prioritize, and resolve tickets within agreed response targets; escalate when needed Prepare, image, ship, and recover laptops and peripherals for a distributed workforce Maintain accurate asset inventory and license records Write and maintain internal documentation, how-to guides, and IT onboarding materials in Notion Support conference room A/V, VPN, printers, and other office technology as needed Security and compliance Apply least-privilege access principles across all managed systems Run periodic access reviews and confirm timely removal of departed users Assist with security awareness reminders and incident response tasks Follow documented change and approval procedures for policy or permission changes Required qualifications 1–3 years of experience in IT support, helpdesk, or systems administration Hands-on experience administering Google Workspace (users, groups, security settings, admin console) Experience with an HRIS or IT lifecycle platform — Rippling strongly preferred (Gusto, Justworks, BambooHR, or Okta/JumpCloud experience considered) Working knowledge of macOS and Windows support, plus basic networking (DNS, DHCP, VPN, Wi-Fi) Comfort with SaaS app administration, SSO, and role-based permission models Genuine interest in identity and access management, and the patience to do the inventory, documentation, and cleanup work that a real access control program requires Clear written and verbal communication; able to explain technical topics to non-technical staff Strong organizational habits, discretion with confidential data, and a bias toward documentation Preferred qualifications Google Workspace Administrator certification or CompTIA A+ / Network+ Experience supporting a fully remote or hybrid workforce Familiarity with MDM tooling, endpoint security, or device compliance programs Basic scripting or automation experience (Apps Script, Python, or similar) and comfort working with app APIs or SCIM provisioning Exposure to IAM tooling (Okta, JumpCloud, Entra ID) or to SOC 2 / access review and audit processes Exposure to Slack, Zoom, Notion, Salesforce, or Atlassian administration Success in the First 90 Days 30 days: Fully ramped on Google Workspace and Rippling configuration; handling routine tickets independently 60 days: Onboarding and offboarding checklists documented and running end to end without escalation; draft RBAC role-to-permission map in review 90 days: Completed a full access review, cleaned up license and asset inventory, published core IT documentation, and delivered a full application and access inventory as the foundation of the access control layer Employment type: Contract Reports to: Technology leadership Location: Remote