Role Overview
The Google Workspace SME will lead and support the end-to-end implementation, architecture, governance, and optimisation of Google Workspace across the organisation. This includes owning the architectural design of the Google Workspace environment, ensuring it is scalable, secure, and aligned to both enterprise and FinTech operating models.
This role requires a proven track record delivering Google Workspace in a large enterprise environment (multi-OU, complex governance, compliance requirements) and in a small, fast-paced FinTech (lean teams, rapid delivery, strong security posture, high user impact).
In addition to strong technical delivery skills, the SME will run structured training and enablement for staff, build self-service materials, and serve as a senior point of contact for queries during and after rollout (e.g., hypercare, live support sessions, office hours).
Key Responsibilities
1) Architecture, Implementation & Migration Delivery (Enterprise + FinTech)
- Own the end-to-end architecture design for Google Workspace, including tenant structure, governance model, security controls, and integration patterns
- Lead or support Google Workspace implementations including domain setup, admin configuration, governance model, and operational handover
- Deliver migration programmes such as:
- Email (e.g., Exchange/M365 → Gmail)
- Files (file shares/SharePoint/OneDrive → Google Drive, where applicable)
- Collaboration rollout (Meet/Chat/Calendar standardisation)
- Design and execute pilot and phased rollout strategies, including cutover planning, risk mitigation, rollback approaches, and hypercare support
- Coordinate dependencies across security, networking, identity, compliance, and endpoint teams
2) Enterprise Administration & Governance
- Own and administer Workspace via Google Admin Console, covering:
- Organisational Unit (OU) and Group design strategy (enterprise-scale governance)
- Gmail routing, mail flow, transport rules, quarantine, and spam policies
- Drive sharing governance (internal/external, link sharing, trust rules)
- Meet/Chat/Calendar policy configuration aligned to business needs
- Define and maintain standards, reference architectures, and service guardrails (multi-region considerations where relevant)
3) Security, Risk, and Compliance (FinTech-Strong)
- Implement and maintain security controls aligned to regulated environments:
- SSO/MFA, conditional/context-aware access (where used)
- Data governance controls including retention, audit logging, and policy enforcement
- Support legal hold / eDiscovery requirements where applicable (e.g., via Google Vault)
- Partner with InfoSec and Risk to ensure the environment meets organisational policies and regulatory expectations
- Contribute to security reviews, control attestations, and operational risk remediation plans
4) Identity & Access Integration
- Integrate Google Workspace with enterprise IAM (e.g., Entra ID (Azure AD), Okta, ADFS) including:
- SSO configuration and authentication flows
- Automated provisioning and deprovisioning (e.g., SCIM where applicable)
- Group management patterns and role-based administration
- Ensure access controls are scalable for enterprise and pragmatic for small FinTech operations
5) Training, Enablement & User Support (Core Requirement)
- Design and deliver training programmes for different audiences:
- End users (Gmail, Drive, Docs/Sheets, Meet, Calendar, Chat)
- Champions network / power users
- Service desk (L1/L2 triage, common fixes, escalation pathways)
- Admin and support teams (governance, policy basics, standard operations)
- Run live sessions, workshops, recorded demos, and "lunch & learn" events
- Establish office hours and/or drop-in clinics to answer questions during rollout
- Create and maintain enablement materials:
- Quick-start guides, FAQs, "how-to" articles, short videos, troubleshooting playbooks
- Provide practical, user-friendly support for queries, translating technical settings into simple guidance
6) Operational Support & Continuous Improvement
- Provide L3 support for escalations, including complex mail flow, Drive access issues, policy conflicts, and permission design
- Lead/participate in major incident management, RCA, and corrective/preventative actions (CAPA)
- Monitor service performance and adoption metrics; recommend improvements
- Maintain operational documentation, runbooks, and knowledge base articles
- Support release/change management for Google Workspace feature updates and policy changes
7) Stakeholder Management & Communication
- Engage stakeholders across Product, Engineering, Security, Compliance, and Operations
- Translate business needs into technical outcomes and adoption strategies
- Provide clear decision papers and options, including cost/licensing considerations and risk trade-offs
