WHO WE ARE:The world’s finest art, automobiles, and antiques are sold at auction—so too is luxury real estate. Enter the smart way to buy and sell luxury properties. Our expert team curates the world’s finest properties, matches them with the most capable property connoisseurs from across the globe, and facilitates easy, market-driven transactions.Since 2008, we have closed over $5B in luxury properties, with the typical sale ranging between $2.5M and $30M—and are dominating the $20M-plus industry. Our business has spanned the globe, including 46 US states and 38 countries, and we host a database of nearly 1 billion global contacts. Majority owned by Sotheby’s, the world’s premier destination for fine art and luxury goods, and Compass (NYSE: COMP), Concierge Auctions continues to operate independently, partnering with real estate agents affiliated with many of the industry's leading brokerages to host luxury property auctions for clients. ROLE OVERVIEW:Concierge Auctions is hiring an IT Administrator to own the day-to-day administration of our core internal systems, with a primary focus on Google Workspace and Rippling. This person is the first point of contact for employee technology needs — accounts, devices, access, and everyday troubleshooting — and keeps onboarding and offboarding running smoothly and securely.Beyond day-to-day administration, this role is a direct partner on a strategic initiative: building a unified access control layer across all Concierge Auctions applications and systems. Working alongside our technology lead, this person will help inventory every system we use, define role-based access standards, consolidate identity and provisioning, and automate how access is granted, reviewed, and revoked across the company.This is a hands-on, execution-focused role well suited to someone with 1–3 years of IT support or systems administration experience who wants ownership of a modern, cloud-first stack and real exposure to identity and access management (IAM) architecture.RequirementsGoogle Workspace administrationManage users, groups, organizational units, and aliases in the Google Admin consoleAdminister Gmail, Drive, shared drives, Calendar, Meet, and Groups settingsEnforce security policies: 2-step verification, app access controls, third-party OAuth review, and device managementMonitor admin audit and login reports; investigate suspicious activity and respond to phishing reportsManage license assignment and storage usage; handle data retention, exports, and account transfers on departuresRippling administrationMaintain employee records, org structure, and role-based permissions in RipplingBuild and run onboarding and offboarding workflows, including app provisioning and de-provisioningAdminister app management and SSO connections for third-party toolsSupport device inventory, enrollment, and MDM policies through RipplingPartner with HR and Finance on employee lifecycle changes, reporting, and app spend visibilityAccess control layer (major initiative)This person will work directly with our technology lead to design, build, and operate a company-wide access control layer. Expect roughly 30–40% of the role to be dedicated to this initiative.Build and maintain a complete inventory of applications, systems, and data stores, including owners, sensitivity, and current access methodsHelp define a role-based access control (RBAC) model that maps job roles and departments to standardized permission setsConsolidate authentication behind SSO where possible; document exceptions and plan remediation for systems that cannot integrateImplement automated provisioning and de-provisioning so access follows the employee lifecycle (hire, transfer, promote, depart) without manual stepsBuild recurring access review workflows and produce evidence that reviews were completedInstrument logging and alerting for privileged access, permission changes, and anomalous sign-insDocument access policies, request and approval paths, and break-glass procedures; keep them current in NotionTrack and report on progress: systems covered, percentage behind SSO, orphaned accounts closed, average time to provision and de-provisionEnd-user support and IT operationsServe as first-line support for hardware, software, account, and access requestsTrack, prioritize, and resolve tickets within agreed response targets; escalate when neededPrepare, image, ship, and recover laptops and peripherals for a distributed workforceMaintain accurate asset inventory and license recordsWrite and maintain internal documentation, how-to guides, and IT onboarding materials in NotionSupport conference room A/V, VPN, printers, and other office technology as neededSecurity and complianceApply least-privilege access principles across all managed systemsRun periodic access reviews and confirm timely removal of departed usersAssist with security awareness reminders and incident response tasksFollow documented change and approval procedures for policy or permission changesRequired qualifications1–3 years of experience in IT support, helpdesk, or systems administrationHands-on experience administering Google Workspace (users, groups, security settings, admin console)Experience with an HRIS or IT lifecycle platform — Rippling strongly preferred (Gusto, Justworks, BambooHR, or Okta/JumpCloud experience considered)Working knowledge of macOS and Windows support, plus basic networking (DNS, DHCP, VPN, Wi-Fi)Comfort with SaaS app administration, SSO, and role-based permission modelsGenuine interest in identity and access management, and the patience to do the inventory, documentation, and cleanup work that a real access control program requiresClear written and verbal communication; able to explain technical topics to non-technical staffStrong organizational habits, discretion with confidential data, and a bias toward documentationPreferred qualificationsGoogle Workspace Administrator certification or CompTIA A+ / Network+Experience supporting a fully remote or hybrid workforceFamiliarity with MDM tooling, endpoint security, or device compliance programsBasic scripting or automation experience (Apps Script, Python, or similar) and comfort working with app APIs or SCIM provisioningExposure to IAM tooling (Okta, JumpCloud, Entra ID) or to SOC 2 / access review and audit processesExposure to Slack, Zoom, Notion, Salesforce, or Atlassian administrationSuccess in the First 90 Days30 days: Fully ramped on Google Workspace and Rippling configuration; handling routine tickets independently60 days: Onboarding and offboarding checklists documented and running end to end without escalation; draft RBAC role-to-permission map in review90 days: Completed a full access review, cleaned up license and asset inventory, published core IT documentation, and delivered a full application and access inventory as the foundation of the access control layerBenefitsEmployment type: ContractReports to: Technology leadershipLocation: Remote
WHO WE ARE:
The world’s finest art, automobiles, and antiques are sold at auction—so too is luxury real estate. Enter the smart way to buy and sell luxury properties. Our expert team curates the world’s finest properties, matches them with the most capable property connoisseurs from across the globe, and facilitates easy, market-driven transactions.
Since 2008, we have closed over $5B in luxury properties, with the typical sale ranging between $2.5M and $30M—and are dominating the $20M-plus industry. Our business has spanned the globe, including 46 US states and 38 countries, and we host a database of nearly 1 billion global contacts. Majority owned by Sotheby’s, the world’s premier destination for fine art and luxury goods, and Compass (NYSE: COMP), Concierge Auctions continues to operate independently, partnering with real estate agents affiliated with many of the industry's leading brokerages to host luxury property auctions for clients.
ROLE OVERVIEW:
Concierge Auctions is hiring an IT Administrator to own the day-to-day administration of our core internal systems, with a primary focus on Google Workspace and Rippling. This person is the first point of contact for employee technology needs — accounts, devices, access, and everyday troubleshooting — and keeps onboarding and offboarding running smoothly and securely.
Beyond day-to-day administration, this role is a direct partner on a strategic initiative: building a unified access control layer across all Concierge Auctions applications and systems. Working alongside our technology lead, this person will help inventory every system we use, define role-based access standards, consolidate identity and provisioning, and automate how access is granted, reviewed, and revoked across the company.
This is a hands-on, execution-focused role well suited to someone with 1–3 years of IT support or systems administration experience who wants ownership of a modern, cloud-first stack and real exposure to identity and access management (IAM) architecture.
Requirements
Google Workspace administration
- Manage users, groups, organizational units, and aliases in the Google Admin console
- Administer Gmail, Drive, shared drives, Calendar, Meet, and Groups settings
- Enforce security policies: 2-step verification, app access controls, third-party OAuth review, and device management
- Monitor admin audit and login reports; investigate suspicious activity and respond to phishing reports
- Manage license assignment and storage usage; handle data retention, exports, and account transfers on departures
Rippling administration
- Maintain employee records, org structure, and role-based permissions in Rippling
- Build and run onboarding and offboarding workflows, including app provisioning and de-provisioning
- Administer app management and SSO connections for third-party tools
- Support device inventory, enrollment, and MDM policies through Rippling
- Partner with HR and Finance on employee lifecycle changes, reporting, and app spend visibility
Access control layer (major initiative)
This person will work directly with our technology lead to design, build, and operate a company-wide access control layer. Expect roughly 30–40% of the role to be dedicated to this initiative.
- Build and maintain a complete inventory of applications, systems, and data stores, including owners, sensitivity, and current access methods
- Help define a role-based access control (RBAC) model that maps job roles and departments to standardized permission sets
- Consolidate authentication behind SSO where possible; document exceptions and plan remediation for systems that cannot integrate
- Implement automated provisioning and de-provisioning so access follows the employee lifecycle (hire, transfer, promote, depart) without manual steps
- Build recurring access review workflows and produce evidence that reviews were completed
- Instrument logging and alerting for privileged access, permission changes, and anomalous sign-ins
- Document access policies, request and approval paths, and break-glass procedures; keep them current in Notion
- Track and report on progress: systems covered, percentage behind SSO, orphaned accounts closed, average time to provision and de-provision
End-user support and IT operations
- Serve as first-line support for hardware, software, account, and access requests
- Track, prioritize, and resolve tickets within agreed response targets; escalate when needed
- Prepare, image, ship, and recover laptops and peripherals for a distributed workforce
- Maintain accurate asset inventory and license records
- Write and maintain internal documentation, how-to guides, and IT onboarding materials in Notion
- Support conference room A/V, VPN, printers, and other office technology as needed
Security and compliance
- Apply least-privilege access principles across all managed systems
- Run periodic access reviews and confirm timely removal of departed users
- Assist with security awareness reminders and incident response tasks
- Follow documented change and approval procedures for policy or permission changes
Required qualifications
- 1–3 years of experience in IT support, helpdesk, or systems administration
- Hands-on experience administering Google Workspace (users, groups, security settings, admin console)
- Experience with an HRIS or IT lifecycle platform — Rippling strongly preferred (Gusto, Justworks, BambooHR, or Okta/JumpCloud experience considered)
- Working knowledge of macOS and Windows support, plus basic networking (DNS, DHCP, VPN, Wi-Fi)
- Comfort with SaaS app administration, SSO, and role-based permission models
- Genuine interest in identity and access management, and the patience to do the inventory, documentation, and cleanup work that a real access control program requires
- Clear written and verbal communication; able to explain technical topics to non-technical staff
- Strong organizational habits, discretion with confidential data, and a bias toward documentation
Preferred qualifications
- Google Workspace Administrator certification or CompTIA A+ / Network+
- Experience supporting a fully remote or hybrid workforce
- Familiarity with MDM tooling, endpoint security, or device compliance programs
- Basic scripting or automation experience (Apps Script, Python, or similar) and comfort working with app APIs or SCIM provisioning
- Exposure to IAM tooling (Okta, JumpCloud, Entra ID) or to SOC 2 / access review and audit processes
- Exposure to Slack, Zoom, Notion, Salesforce, or Atlassian administration
Success in the First 90 Days - 30 days: Fully ramped on Google Workspace and Rippling configuration; handling routine tickets independently
- 60 days: Onboarding and offboarding checklists documented and running end to end without escalation; draft RBAC role-to-permission map in review
- 90 days: Completed a full access review, cleaned up license and asset inventory, published core IT documentation, and delivered a full application and access inventory as the foundation of the access control layer
Benefits
- Employment type: Contract
- Reports to: Technology leadership
- Location: Remote
