Senior Cloud Automation & Backup Engineer

TIAA; Town of Florida (NY); Hybrid; USD 69,000 - 113,000; Full time

Job summary

TIAA is seeking a seasoned IT professional for a non-employee contingent role focusing on information systems engineering and data protection. The engineer will design, implement, and maintain complex backup and storage systems, ensuring secure, auditable operations and automation across platforms.

Responsibilities include building automation for patching, CVE remediation, and credential rotation, while coordinating with cross-functional teams to meet enterprise security and reliability

Qualifications

• 7+ years of IT experience with data protection, backup and storage
• Hands-on experience with PPDM/Data Domain/ECS, Rubrik, NetApp ONTAP in enterprise environments
• Experience building automation and orchestration tooling (scripting, APIs, playbooks)
• Knowledge of vulnerability management, CVE tracking and asset correlation

Responsibilities

• Build orchestrated patching playbooks with pre/post validation for CVE remediation
• Develop CVE-to-asset correlation service against live platform inventory
• Create scheduled backup posture validation covering immutability and retention controls
• Implement configuration drift detection using ActiveIQ and ONTAP REST APIs with automated baselines (FIPS, encryption-at-rest, audit logging)
• Build deprovisioning workflows for backup admin access tied to HR/IAM events
• Integrate vault-based credential rotation for service accounts
• Produce audit-ready documentation and artifacts for automated controls

Skills

Scripting: PowerShell/Python

Automation & Orchestration

Education

Bachelor's degree in IT/CS

Tools

PPDM/Data Domain/ECS

Rubrik

NetApp ONTAP

CyberArk Vault

HashiCorp Vault

Job description

TIAA is seeking a seasoned IT professional for a non-employee contingent role focusing on information systems engineering and data protection. The engineer will design, implement, and maintain complex backup and storage systems, ensuring secure, auditable operations and automation across platforms.

Responsibilities include building automation for patching, CVE remediation, and credential rotation, while coordinating with cross-functional teams to meet enterprise security and reliability