IT Administrator (Google Workspace & Rippling)

WHO WE ARE:

The world’s finest art, automobiles, and antiques are sold at auction—so too is luxury real estate. Enter the smart way to buy and sell luxury properties. Our expert team curates the world’s finest properties, matches them with the most capable property connoisseurs from across the globe, and facilitates easy, market-driven transactions.

Since 2008, we have closed over $5B in luxury properties, with the typical sale ranging between $2.5M and $30M—and are dominating the $20M-plus industry. Our business has spanned the globe, including 46 US states and 38 countries, and we host a database of nearly 1 billion global contacts. Majority owned by Sotheby’s, the world’s premier destination for fine art and luxury goods, and Compass (NYSE: COMP), Concierge Auctions continues to operate independently, partnering with real estate agents affiliated with many of the industry's leading brokerages to host luxury property auctions for clients.

ROLE OVERVIEW:

Concierge Auctions is hiring an IT Administrator to own the day-to-day administration of our core internal systems, with a primary focus on Google Workspace and Rippling. This person is the first point of contact for employee technology needs — accounts, devices, access, and everyday troubleshooting — and keeps onboarding and offboarding running smoothly and securely.

Beyond day-to-day administration, this role is a direct partner on a strategic initiative: building a unified access control layer across all Concierge Auctions applications and systems. Working alongside our technology lead, this person will help inventory every system we use, define role-based access standards, consolidate identity and provisioning, and automate how access is granted, reviewed, and revoked across the company.

This is a hands-on, execution-focused role well suited to someone with 1–3 years of IT support or systems administration experience who wants ownership of a modern, cloud-first stack and real exposure to identity and access management (IAM) architecture.

Requirements

Google Workspace administration

Manage users, groups, organizational units, and aliases in the Google Admin console

Administer Gmail, Drive, shared drives, Calendar, Meet, and Groups settings

Enforce security policies: 2-step verification, app access controls, third-party OAuth review, and device management

Monitor admin audit and login reports; investigate suspicious activity and respond to phishing reports

Manage license assignment and storage usage; handle data retention, exports, and account transfers on departures

Rippling administration

Maintain employee records, org structure, and role-based permissions in Rippling

Build and run onboarding and offboarding workflows, including app provisioning and de-provisioning

Administer app management and SSO connections for third-party tools

Support device inventory, enrollment, and MDM policies through Rippling

Partner with HR and Finance on employee lifecycle changes, reporting, and app spend visibility

Access control layer (major initiative)

This person will work directly with our technology lead to design, build, and operate a company-wide access control layer. Expect roughly 30–40% of the role to be dedicated to this initiative.

Build and maintain a complete inventory of applications, systems, and data stores, including owners, sensitivity, and current access methods

Help define a role-based access control (RBAC) model that maps job roles and departments to standardized permission sets

Consolidate authentication behind SSO where possible; document exceptions and plan remediation for systems that cannot integrate

Implement automated provisioning and de-provisioning so access follows the employee lifecycle (hire, transfer, promote, depart) without manual steps

Build recurring access review workflows and produce evidence that reviews were completed

Instrument logging and alerting for privileged access, permission changes, and anomalous sign-ins

Document access policies, request and approval paths, and break-glass procedures; keep them current in Notion

Track and report on progress: systems covered, percentage behind SSO, orphaned accounts closed, average time to provision and de-provision

End-user support and IT operations

Serve as first-line support for hardware, software, account, and access requests

Track, prioritize, and resolve tickets within agreed response targets; escalate when needed

Prepare, image, ship, and recover laptops and peripherals for a distributed workforce

Maintain accurate asset inventory and license records

Write and maintain internal documentation, how-to guides, and IT onboarding materials in Notion

Support conference room A/V, VPN, printers, and other office technology as needed

Security and compliance

Apply least-privilege access principles across all managed systems

Run periodic access reviews and confirm timely removal of departed users

Assist with security awareness reminders and incident response tasks

Follow documented change and approval procedures for policy or permission changes

Required qualifications

1–3 years of experience in IT support, helpdesk, or systems administration

Hands-on experience administering Google Workspace (users, groups, security settings, admin console)

Experience with an HRIS or IT lifecycle platform — Rippling strongly preferred (Gusto, Justworks, BambooHR, or Okta/JumpCloud experience considered)

Working knowledge of macOS and Windows support, plus basic networking (DNS, DHCP, VPN, Wi-Fi)

Comfort with SaaS app administration, SSO, and role-based permission models

Genuine interest in identity and access management, and the patience to do the inventory, documentation, and cleanup work that a real access control program requires

Clear written and verbal communication; able to explain technical topics to non-technical staff

Strong organizational habits, discretion with confidential data, and a bias toward documentation

Preferred qualifications

Google Workspace Administrator certification or CompTIA A+ / Network+

Experience supporting a fully remote or hybrid workforce

Familiarity with MDM tooling, endpoint security, or device compliance programs

Basic scripting or automation experience (Apps Script, Python, or similar) and comfort working with app APIs or SCIM provisioning

Exposure to IAM tooling (Okta, JumpCloud, Entra ID) or to SOC 2 / access review and audit processes

Exposure to Slack, Zoom, Notion, Salesforce, or Atlassian administration

Success in the First 90 Days

30 days: Fully ramped on Google Workspace and Rippling configuration; handling routine tickets independently

60 days: Onboarding and offboarding checklists documented and running end to end without escalation; draft RBAC role-to-permission map in review

90 days: Completed a full access review, cleaned up license and asset inventory, published core IT documentation, and delivered a full application and access inventory as the foundation of the access control layer

Benefits

Employment type: Contract

Reports to: Technology leadership

Location: Remote

Originally posted on Himalayas