Sr Lead Systems Cloud Engineer-2

TIAA; Illinois; Hybrid; USD 80,000 - 117,000; Part time

Job summary

TIAA is seeking a Senior Lead Data Platform Engineer - Cloud to provide lead data management and analytics support for the data platform team. The role centers on delivering scalable cloud-based data services and driving data consumption across the enterprise.

Responsibilities include leading data platform initiatives, defining requirements and timelines, and collaborating with data engineers to optimize cloud platforms.

Qualifications

• 7 years of relevant IT experience.
• Experience in a high-tech customer-facing role (Professional Services/Architecture/Engineering).
• Hands-on with Entra ID, Active Directory, Windows Server; senior operational support.
• Experience designing infrastructure and integrating Entra ID/AD services.
• Experience supporting AD or Entra ID for 5+ years.
• Monitoring with Splunk or MECM/Quest tools is a plus.
• Understanding WAN/LAN, TCP/IP, and network basics.
• PowerShell scripting experience.
• Experience with MFA, SSO, and SSL certificates.

Responsibilities

• Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory across the enterprise, incl. cloud deployments (AWS/Azure).
• Develop and enhance Entra ID and AD engineering standards for a multi-site org.
• Build technical partnerships with architecture, project, operations and support teams.
• Automate authentication solutions in multi-forest/domain environments with IaaS like AWS/Azure.
• Provide 3rd level support for enterprise Entra ID/AD and related technologies (AAD Connect, SSO, Graph API).

Skills

Microsoft Entra ID

Active Directory

Windows Server

PowerShell

SSO

MFA

Networking

Cloud platforms (Azure/AWS)

SAML/OAuth2

Collaboration / Documentation

Education

Bachelor's degree in Information Technology; Computer Science or related technical field

Tools

Splunk

MECM

Quest Change Auditor

VMware/Hyper-V

Job description

This is a Non-Employee Contingent Worker Role providing services for TIAA’s family of companies and will be employed by TIAA's preferred 3rd Party Supplier. As a Non-Employee CW, perform a variety of moderately complex business planning, support, and project-related duties. Demonstrates an exceptional standard of quality and holds themselves accountable to achieving excellent results.

This role will sit onsite, likely in a hybrid capacity, at the location(s) listed in this posting.

The anticipated term of this engagement will be 23 months. This term could be extended based on company business needs.

The Senior Lead Data Platform Engineer - Cloud provides data management and analytics support to the data platform team and organizes data from a variety of internal and external sources. While establishing operational plans, this job ensures the delivery of scalable data services and drives data consumption via cloud-based technology.

Key Responsibilities And Duties

• Leads data platform initiatives through the integration of engineering principles and maintenance of cloud services.
• Reviews data platform requirements, builds scalable and efficient processes, and populates platform data in the cloud.
• Curates large amounts of real-time and relational data and disseminates among the data platform team.
• Utilizes data engineering expertise and enhances the data cloud and team processes.
• Drives the data platform roadmap and defines requirements, timelines, and resources.
• Streamlines operations for the data platform and leads complex integrations with the data engineering team.
• Collaborates with data engineers on platform initiatives and cloud management for optimal business operations.
• Reviews data platform requirements, builds scalable processes, and populates platform data in the cloud.

Educational Requirements

• University (Degree) Preferred

Work Experience

• 5+ Years Required; 7+ Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level

9IC

This role will provide lead level solution architecture, engineering design, implementation and technical third-level support services for Microsoft Entra, Microsoft Active Directory and the Windows Server platform across our enterprise. This includes authentication services in Entra ID, (Azure Active Directory), and on-prem AD. The core infrastructure technology tasking includes enterprise standards for authentication services including: SSO for SaaS applications using modern authentication protocols such as SAML and OAuth2, other authentication services such as Kerberos and LDAP, global system security standards and top-level support for enterprise-wide infrastructure applications.

Responsibilities

• Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory authentication services across the enterprise, including cloud deployments in Amazon (AWS) and Microsoft Azure
• Develop and enhance Microsoft Entra ID and Active Directory engineering standards for a multi-site organization, including the core operating system and authentication services
• Develop technical partnerships with key architecture, project, operations, and support teams
• Automating Microsoft authentication solutions in a multi-forest and multi-domain environment and configuration for Microsoft Entra and Active Directory, while considering IaaS Cloud solutions such as AWS and Azure
• Provide 3rd level support for an enterprise-wide, distributed Microsoft Entra ID and Active Directory, including related technologies such as AAD Connect, SSO, the Graph API, etc.

Qualifications

Required

• 7 years of relevant IT experience
• Demonstrated experience in a high-tech customer-facing role (i.e. Professional Services, Solution Architecture, Systems Administrator, Engineering or Consulting)
• Hands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies; experience providing senior level operational support and implementation of large-scale, enterprise level solutions
• Previous experience with the design of infrastructure and integration into new and existing authentication services like Entra ID and AD services
• Five years of demonstrated experience supporting Active Directory or Microsoft Entra ID
• In-depth and thorough understanding of monitoring best practices preferably with Splunk, Microsoft EndPoint Configuration Manager (MECM) and/or Quest Change Auditor
• Experience with infrastructure and server theories, principles and concepts, application infrastructure and standards, networking fundamentals, physical server architecture, and virtualization technologies (i.e. VMware, Hyper-V and LAN/WAN/Firewall/VPN networks
• Power Shell scripting experience
• Hands-on experience with Multi-Factor Authentication, SSO, and SSL certificates implementation and management
• Understand WAN/LAN concepts and the TCP/IP protocol stack

Preferred

• Bachelor’s degree in Information Technology; Computer Science or related technical field
• Microsoft Windows Server certifications; Azure Certifications or MCSE
• Working knowledge of ticketing systems; creating, updating and closing tickets
• Strong customer service customer service skills (both written and verbal)
• Excellent interpersonal skills, ability to listen and understand what is being described
• Experience with one or more cloud providers such as Azure, AWS, or Google Cloud Platform
• Ability to effectively deliver and execute technical projects across multiple engagements in customer-facing-capacity

Start Date: 28-Sep-2026

End Date: 31-Aug-2028

Travel Required: No

Base Pay Range: $58.22/hr - $84.62/hr

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location.

Equal Opportunity

We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.

Our full EEO & Non-Discrimination statement is on our careers home page, and you can read more about your rights and view government notices here.

Accessibility Support

TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.

If You Are a U.S. Applicant And Desire a Reasonable Accommodation To Complete a Job Application Please Use One Of The Below Options To Contact Our Accessibility Support Team:

Phone: [phone]

Email: [e-mail]

Drug and Smoking Policy

TIAA maintains a drug-free and smoke/free workplace.

Privacy Notices

For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here.

For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here.

For Applicants of TIAA Global Capabilities, click here.

For Applicants of Nuveen residing in Europe and APAC, please click here.

This role will provide lead level solution architecture, engineering design, implementation and technical third-level support services for Microsoft Entra, Microsoft Active Directory and the Windows Server platform across our enterprise. This includes authentication services in Entra ID, (Azure Active Directory), and on-prem AD. The core infrastructure technology tasking includes enterprise standards for authentication services including: SSO for SaaS applications using modern authentication protocols such as SAML and OAuth2, other authentication services such as Kerberos and LDAP, global system security standards and top-level support for enterprise-wide infrastructure applications.

Preferred

• Bachelor’s degree in Information Technology; Computer Science or related technical field
• Microsoft Windows Server certifications; Azure Certifications or MCSE
• Working knowledge of ticketing systems; creating, updating and closing tickets
• Strong customer service customer service skills (both written and verbal)
• Excellent interpersonal skills, ability to listen and understand what is being described
• Experience with one or more cloud providers such as Azure, AWS, or Google Cloud Platform
• Ability to effectively deliver and execute technical projects across multiple engagements in customer-facing-capacity