Logo for TIAA

Sr Lead Systems Cloud Engineer-2

Role overview

Qualifications

  • 7 years of relevant IT experience
  • Hands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies
  • Five years of demonstrated experience supporting Active Directory or Microsoft Entra ID
  • Power Shell scripting experience

Responsibilities

  • Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory authentication services across the enterprise
  • Develop and enhance Microsoft Entra ID and Active Directory engineering standards
  • Automating Microsoft authentication solutions in a multi-forest and multi-domain environment
  • Provide 3rd level support for an enterprise-wide, distributed Microsoft Entra ID and Active Directory

About the company

TIAA logo

TIAA

Financial Services

Founded to help educators retire with dignity, today we’re a market-leading retirement company fueled by world-class asset management. We’re fighting harder than ever before for 5M+ clients and people who need us, creating new paths to growth and lifetime income—and the confident, meaningful retirements that come with them. For our Terms of Use, please visit go.tiaa.org/termsofuse. Any guarantees under annuities issued by TIAA are subject to TIAA’s claims-paying ability. TIAA-CREF Individual & Institutional Services, LLC, Members FINRA and SIPC, distribute securities products. TIAA is not responsible for the content or privacy policies of third-party sites to which you may link. 3026872

Company details

Company typeXLarge
IndustryFinancial Services
Company size10001

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

This is a Non-Employee Contingent Worker Role providing services for TIAA’s family of companies and will be employed by TIAA's preferred 3rd Party Supplier. As a Non-Employee CW, perform a variety of moderately complex business planning, support, and project-related duties. Demonstrates an exceptional standard of quality and holds themselves accountable to achieving excellent results.

This role will sit onsite, likely in a hybrid capacity, at the location(s) listed in this posting.

The anticipated term of this engagement will be 23 months. This term could be extended based on company business needs.


The Senior Lead Data Platform Engineer - Cloud provides data management and analytics support to the data platform team and organizes data from a variety of internal and external sources. While establishing operational plans, this job ensures the delivery of scalable data services and drives data consumption via cloud-based technology.

Key Responsibilities and Duties
  • Leads data platform initiatives through the integration of engineering principles and maintenance of cloud services.
  • Reviews data platform requirements, builds scalable and efficient processes, and populates platform data in the cloud.
  • Curates large amounts of real-time and relational data and disseminates among the data platform team.
  • Utilizes data engineering expertise and enhances the data cloud and team processes.
  • Drives the data platform roadmap and defines requirements, timelines, and resources.
  • Streamlines operations for the data platform and leads complex integrations with the data engineering team.
  • Collaborates with data engineers on platform initiatives and cloud management for optimal business operations.
  • Reviews data platform requirements, builds scalable processes, and populates platform data in the cloud.
Educational Requirements
  • University (Degree) Preferred
Work Experience
  • 5+ Years Required; 7+ Years Preferred
Physical Requirements
  • Physical Requirements: Sedentary Work

Career Level
9IC

This role will provide lead level solution architecture, engineering design, implementation and technical third-level support services for Microsoft Entra, Microsoft Active Directory and the Windows Server platform across our enterprise. This includes authentication services in Entra ID, (Azure Active Directory), and on-prem AD. The core infrastructure technology tasking includes enterprise standards for authentication services including: SSO for SaaS applications using modern authentication protocols such as SAML and OAuth2, other authentication services such as Kerberos and LDAP, global system security standards and top-level support for enterprise-wide infrastructure applications.

Responsibilities:

  • Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory authentication services across the enterprise, including cloud deployments in Amazon (AWS) and Microsoft Azure
  • Develop and enhance Microsoft Entra ID and Active Directory engineering standards for a multi-site organization, including the core operating system and authentication services
  • Develop technical partnerships with key architecture, project, operations, and support teams
  • Automating Microsoft authentication solutions in a multi-forest and multi-domain environment and configuration for Microsoft Entra and Active Directory, while considering IaaS Cloud solutions such as AWS and Azure
  • Provide 3rd level support for an enterprise-wide, distributed Microsoft Entra ID and Active Directory, including related technologies such as AAD Connect, SSO, the Graph API, etc.

Qualifications:

Required:

  • 7 years of relevant IT experience
  • Demonstrated experience in a high-tech customer-facing role (i.e. Professional Services, Solution Architecture, Systems Administrator, Engineering or Consulting)
  • Hands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies; experience providing senior level operational support and implementation of large-scale, enterprise level solutions
  • Previous experience with the design of infrastructure and integration into new and existing authentication services like Entra ID and AD services
  • Five years of demonstrated experience supporting Active Directory or Microsoft Entra ID
  • In-depth and thorough understanding of monitoring best practices preferably with Splunk,  Microsoft EndPoint Configuration Manager (MECM) and/or Quest Change Auditor
  • Experience with infrastructure and server theories, principles and concepts, application infrastructure and standards, networking fundamentals, physical server architecture, and virtualization technologies (i.e. VMware, Hyper-V and LAN/WAN/Firewall/VPN networks
  • Power Shell scripting experience
  • Hands-on experience with Multi-Factor Authentication, SSO, and SSL certificates implementation and management
  • Understand WAN/LAN concepts and the TCP/IP protocol stack

Preferred:

  • Bachelor’s degree in Information Technology; Computer Science or related technical field
  • Microsoft Windows Server certifications; Azure Certifications or MCSE
  • Working knowledge of ticketing systems; creating, updating and closing tickets
  • Strong customer service customer service skills (both written and verbal)
  • Excellent interpersonal skills, ability to listen and understand what is being described
  • Experience with one or more cloud providers such as Azure, AWS, or Google Cloud Platform
  • Ability to effectively deliver and execute technical projects across multiple engagements in a customer-facing-capacity

Start Date: 28-Sep-2026

End Date: 31-Aug-2028

Travel Required: No

Anticipated Posting End Date:

2026-09-03

Base Pay Range: $58.22/hr - $84.62/hr

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location.

_____________________________________________________________________________________________________

Equal Opportunity

We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.

Our full EEO & Non-Discrimination statement is on our careers home page, and you can read more about your rights and view government notices here.

Accessibility Support

TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities. 

If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team: 

Phone: (800) 842-2755

Email: accessibility.support@tiaa.org

Drug and Smoking Policy

TIAA maintains a drug-free and smoke/free workplace.

Privacy Notices

For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here.

For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here.

For Applicants of TIAA Global Capabilities, click here.

For Applicants of Nuveen residing in Europe and APAC, please click here.

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Related jobs

Other jobs at TIAA

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.