Principal, Enclave Systems & Support Administrator

Accelerate your career. Join the organization that's driving the world's technology and shape the future. Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to business-to-business technology experts.

Our market reach, diverse solutions and services portfolio, and digital platform Ingram Micro Xvantage™ set us apart. Learn more at  Come join our team where you’ll make technology happen in surprising ways. Let’s shape tomorrow - it’ll be a fun journey! This is a remote position for candidates located in or near the Washington, DC metropolitan area, including Washington, DC and West Virginia.

U.S. citizenship is required for this role.

Your role :
The Enclave Systems & Support Administrator designs, builds, hardens, and operates the technical enclave — configuring identity, endpoints, data-protection controls, and FIPS-validated cryptography, and running change management — while also delivering tier-1 through tier-3 support: provisioning endpoints, issuing and tracking FIDO2 security keys, resetting credentials under least-privilege scope, and onboarding/training end users through migration and steady-state operations. Architecture, Build & Change Management Administer Google Workspace Enterprise Plus:
Cloud Identity, OU design, custom admin roles, DLP, Drive labels/IRM, trust rules, and mail compliance. Build and operate ChromeOS / Chrome Enterprise endpoints and Amazon Work Spaces (AWS Gov Cloud) Windows VDI. Configure SAML SSO with FIDO2 phishing-resistant authentication and Context-Aware Access policies. Establish and maintain hardened configuration baselines; enforce FIPS-mode cryptography across data states. Run change management: document, test, and approve configuration changes against the baseline and SSP.

Develop scripting / automation for provisioning, configuration, and reporting; maintain backup and restore. Produce configuration evidence for control assessments and the C3

PAO / KPMG reviews. Front-Line Support & Access Hygiene Provide tier-1 through tier-3 service desk support, including the password / MFA reset function (least privilege, fully logged). Provision and manage endpoints and MDM for Chromebook / Chrome Enterprise devices. Issue, inventory, and track FIDO2 security keys (two per user) and manage lifecycle / replacement. Lead user onboarding, joiner-mover-leaver actions, and migration of users and data into the enclave.

Deliver end-user security awareness and CUI-handling training sessions. Maintain security hygiene: patch verification, asset tracking, and ticket documentation. Escalate significant security events to the ISSO & Security Operations Lead per the incident-response runbooks.

• 7+ years of experience with 5+ years administering Google Workspace Enterprise Plus (or equivalent) at scale, including direct end-user / service-desk support experience.
• Bachelor's degree or higher in cyber security, computer science/engineering, management of information systems or similar degrees.
• Hands-on experience with AWS (Gov Cloud preferred), Amazon Work Spaces / VDI, and Chrome Enterprise — both administration and provisioning/support.
• Strong identity background: SAML SSO, FIDO2/Web Authn, conditional/context-aware access, and MFA / hardware-key lifecycle management.
• Configuration-baseline, hardening, and change-management discipline; scripting/automation skills.
• Backup/restore and operational resilience experience.
• Strong customer-service skills and disciplined ticket / asset documentation practice.