IT Lead Developer

The candidate will have responsibilities across the following functions:

Security, IAM and Identity Governance:

• Design and maintain Identity and Access Management (IAM), Single Sign-On (SAML/SSO), Multi-Factor Authentication (2SV/Hardware Keys), and OAuth application approvals.
• Manage Context-Aware Access (CAA) to restrict workspace access based on IP, geo-location, device compliance, and user roles.
• Enforce granular Data Loss Prevention (DLP) policies across Drive, Gmail, and Chat to prevent unauthorised leakage of Sensitive Personal Data (PII, Financial records, Credit card numbers).
• Implement Best Practices and align to CIS Benchmarks.
• Enforce AI Data Governance and Privacy Controls via the Workspace Admin Console to ensure internal company data/PII is protected and never used to train public generative AI models.

Audit, Compliance and Regulatory Readiness:

• Partner with InfoSec and Risk teams to ensure compliance with financial guidelines (RBI Cyber Security Framework, CERT-In, SEBI, GDPR, ISO 27001).
• Maintain complete operational readiness for internal/external audits, keeping immutable logs via Google Vault, eDiscovery rules, and retention policies.
• Configure, export, and monitor log forwarding from Workspace Admin Console to corporate SIEM / SOC tools for real-time threat detection.
• Familiarity with deploying AI-assisted classification, automated DLP rule generation, and smart features governance.
• Monitor and audit generative AI usage metrics and logs via the Google Admin AI Control Centre to ensure alignment with IT/Sec policies and regulatory standards.

Mobile Device Management (MDM) and Endpoint Security:

• Oversee corporate and BYOD mobile management (Android Enterprise, iOS) via Google Endpoint Management or 3rd-party MDMs (ManageEngine).
• Implement remote wipe, encrypted containerization, certificate management, and app whitelisting for employee endpoints.

Mail Routing, Cloud Infrastructure and Automation:

• Manage complex email routing, SPF, DKIM, DMARC, ARC, and advanced phishing/spam filtering configurations.
• Build low-code/no-code operational scripts using Google Apps Script and AppSheet to automate user lifecycle processes (onboarding, offboarding, access reviews).
• Manage integrated GCP projects supporting Workspace applications, API credentials, service accounts, and cloud resource boundaries.
• Oversee and configure AI-driven Threat Defence in Gmail to block sophisticated spear-phishing, deepfake/spoofing attempts, and zero-day malware attacks targeting financial staff.

Requirements:

• Experience: 4-8 years of hands-on experience managing Google Workspace in enterprise environments (preferably within Banking, NBFC, Fintech, or Financial Services).
• Certifications: Google Professional Workspace Administrator (Required/Highly Preferred).
• Identity and Security: Hands-on experience with SAML SSO (Okta, Azure AD/Entra ID, Ping), OAuth 2.0 app governance, zero-trust architectures, and PKI/certificate deployment.
• Automation: Proficiency in Google Apps Script, Python, or low-code frameworks like AppSheet for IT workflow automation.
• Mail and Routing: Deep knowledge of MX, SPF, DKIM, DMARC, inbound/outbound gateways, and TLS enforcement.
• GCP Knowledge: Basic to intermediate experience managing GCP projects tied to Workspace APIs and Service Accounts.
• AI Governance and Administration: Hands-on experience configuring Google Gemini enterprise settings, AI access policies, and data boundaries within the Google Admin console.
• Automated Data Protection: Familiarity with deploying AI-assisted classification, automated DLP rule generation, and smart features governance.
• Next-Gen Automation: Proficiency in writing/debugging Google Apps Script using generative AI assistance and creating automated workflows using AppSheet + Gemini.