[Hiring] IT Administrator @Concierge Auctions

Role Description

Concierge Auctions is hiring an IT Administrator to own the day-to-day administration of our core internal systems, with a primary focus on Google Workspace and Rippling. This person is the first point of contact for employee technology needs — accounts, devices, access, and everyday troubleshooting — and keeps onboarding and offboarding running smoothly and securely.

Beyond day-to-day administration, this role is a direct partner on a strategic initiative: building a unified access control layer across all Concierge Auctions applications and systems. This is a hands-on, execution-focused role well suited to someone with 1–3 years of IT support or systems administration experience who wants ownership of a modern, cloud-first stack and real exposure to identity and access management (IAM) architecture.

• Google Workspace administration
  • Manage users, groups, organizational units, and aliases in the Google Admin console
  • Administer Gmail, Drive, shared drives, Calendar, Meet, and Groups settings
  • Enforce security policies: 2-step verification, app access controls, third-party OAuth review, and device management
  • Monitor admin audit and login reports; investigate suspicious activity and respond to phishing reports
  • Manage license assignment and storage usage; handle data retention, exports, and account transfers on departures
• Rippling administration
  • Maintain employee records, org structure, and role-based permissions in Rippling
  • Build and run onboarding and offboarding workflows, including app provisioning and de-provisioning
  • Administer app management and SSO connections for third-party tools
  • Support device inventory, enrollment, and MDM policies through Rippling
  • Partner with HR and Finance on employee lifecycle changes, reporting, and app spend visibility
• Access control layer (major initiative)
  • Work directly with our technology lead to design, build, and operate a company-wide access control layer
  • Build and maintain a complete inventory of applications, systems, and data stores, including owners, sensitivity, and current access methods
  • Help define a role-based access control (RBAC) model that maps job roles and departments to standardized permission sets
  • Consolidate authentication behind SSO where possible; document exceptions and plan remediation for systems that cannot integrate
  • Implement automated provisioning and de-provisioning so access follows the employee lifecycle (hire, transfer, promote, depart) without manual steps
  • Build recurring access review workflows and produce evidence that reviews were completed
  • Instrument logging and alerting for privileged access, permission changes, and anomalous sign-ins
  • Document access policies, request and approval paths, and break-glass procedures; keep them current in Notion
  • Track and report on progress: systems covered, percentage behind SSO, orphaned accounts closed, average time to provision and de-provision
• End-user support and IT operations
  • Serve as first-line support for hardware, software, account, and access requests
  • Track, prioritize, and resolve tickets within agreed response targets; escalate when needed
  • Prepare, image, ship, and recover laptops and peripherals for a distributed workforce
  • Maintain accurate asset inventory and license records
  • Write and maintain internal documentation, how-to guides, and IT onboarding materials in Notion
  • Support conference room A/V, VPN, printers, and other office technology as needed
• Security and compliance
  • Apply least-privilege access principles across all managed systems
  • Run periodic access reviews and confirm timely removal of departed users
  • Assist with security awareness reminders and incident response tasks
  • Follow documented change and approval procedures for policy or permission changes

Qualifications

• 1–3 years of experience in IT support, helpdesk, or systems administration
• Hands-on experience administering Google Workspace (users, groups, security settings, admin console)
• Experience with an HRIS or IT lifecycle platform — Rippling strongly preferred (Gusto, Justworks, BambooHR, or Okta/JumpCloud experience considered)
• Working knowledge of macOS and Windows support, plus basic networking (DNS, DHCP, VPN, Wi-Fi)
• Comfort with SaaS app administration, SSO, and role-based permission models
• Genuine interest in identity and access management, and the patience to do the inventory, documentation, and cleanup work that a real access control program requires
• Clear written and verbal communication; able to explain technical topics to non-technical staff
• Strong organizational habits, discretion with confidential data, and a bias toward documentation

Preferred Qualifications

• Google Workspace Administrator certification or CompTIA A+ / Network+
• Experience supporting a fully remote or hybrid workforce
• Familiarity with MDM tooling, endpoint security, or device compliance programs
• Basic scripting or automation experience (Apps Script, Python, or similar) and comfort working with app APIs or SCIM provisioning
• Exposure to IAM tooling (Okta, JumpCloud, Entra ID) or to SOC 2 / access review and audit processes
• Exposure to Slack, Zoom, Notion, Salesforce, or Atlassian administration

Success in the First 90 Days

• 30 days: Fully ramped on Google Workspace and Rippling configuration; handling routine tickets independently
• 60 days: Onboarding and offboarding checklists documented and running end to end without escalation; draft RBAC role-to-permission map in review
• 90 days: Completed a full access review, cleaned up license and asset inventory, published core IT documentation, and delivered a full application and access inventory as the foundation of the access control layer

Employment Type

Contract

Reports To

Technology leadership

Location

Remote