Sr Lead Systems Cloud Engineer-2

TIAA; New Jersey; Hybrid; USD 80,000 - 117,000; Full time

Job summary

TIAA is seeking a Senior Lead Data Platform Engineer - Cloud to drive data platform initiatives and cloud-based data services. You will lead architecture, design and implementation across Entra ID, AD, and Windows Server environments, coordinating with cloud providers and internal teams to secure authentication services.

The role emphasizes lead-level engineering, multi-site deployments, and automation, with a strong focus on SSO, MFA, and enterprise security standards.

Qualifications

• 7 years of IT experience in enterprise environments.
• Experience in professional services, solution architecture, or large-scale support.
• Hands-on with Entra ID, Active Directory and Windows Server.
• Experience integrating Entra ID/AD with cloud and on-premise workflows.
• Familiarity with MFA, SSO, and certificate management.

Responsibilities

• Provide lead level support, design, and implementation for Entra and AD across the enterprise.
• Develop standards for Entra ID/AD engineering within a multi-site organization.
• Collaborate with architecture, operations, and support teams on projects.
• Automate authentication solutions across multi-forest and multi-domain environments.
• Deliver third-level support for enterprise Entra ID and AD technologies.

Skills

Microsoft Entra ID

Active Directory

Windows Server

SAML/OAuth2

SSO

PowerShell

Cloud platforms (Azure/AWS)

Education

Bachelor’s degree preferred

Tools

Azure

AWS

MECM

Graph API

Splunk

Quest Change Auditor

Job description

This is a Non-Employee Contingent Worker Role providing services for TIAA’s family of companies and will be employed by TIAA's preferred 3rd Party Supplier. As a Non-Employee CW, perform a variety of moderately complex business planning, support, and project-related duties. Demonstrates an exceptional standard of quality and holds themselves accountable to achieving excellent results.

This role will sit onsite, likely in a hybrid capacity, at the location(s) listed in this posting.

The anticipated term of this engagement will be 23 months. This term could be extended based on company business needs.

The Senior Lead Data Platform Engineer - Cloud provides data management and analytics support to the data platform team and organizes data from a variety of internal and external sources. While establishing operational plans, this job ensures the delivery of scalable data services and drives data consumption via cloud-based technology.

Key Responsibilities And Duties

• Leads data platform initiatives through the integration of engineering principles and maintenance of cloud services.
• Reviews data platform requirements, builds scalable and efficient processes, and populates platform data in the cloud.
• Curates large amounts of real-time and relational data and disseminates among the data platform team.
• Utilizes data engineering expertise and enhances the data cloud and team processes.
• Drives the data platform roadmap and defines requirements, timelines, and resources.
• Streamlines operations for the data platform and leads complex integrations with the data engineering team.
• Collaborates with data engineers on platform initiatives and cloud management for optimal business operations.
• Reviews data platform requirements, builds scalable processes, and populates platform data in the cloud.

Educational Requirements

• University (Degree) Preferred

Work Experience

• 5+ Years Required; 7+ Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level

9IC

This role will provide lead level solution architecture, engineering design, implementation and technical third-level support services for Microsoft Entra, Microsoft Active Directory and the Windows Server platform across our enterprise. This includes authentication services in Entra ID, (Azure Active Directory), and on-prem AD. The core infrastructure technology tasking includes enterprise standards for authentication services including: SSO for SaaS applications using modern authentication protocols such as SAML and OAuth2, other authentication services such as Kerberos and LDAP, global system security standards and top-level support for enterprise-wide infrastructure applications.

Responsibilities

• Provide lead level technical support, design, and implementation for Microsoft Entra and Active Directory authentication services across the enterprise, including cloud deployments in Amazon (AWS) and Microsoft Azure
• Develop and enhance Microsoft Entra ID and Active Directory engineering standards for a multi-site organization, including the core operating system and authentication services
• Develop technical partnerships with key architecture, project, operations, and support teams
• Automating Microsoft authentication solutions in a multi-forest and multi-domain environment and configuration for Microsoft Entra and Active Directory, while considering IaaS Cloud solutions such as AWS and Azure
• Provide 3rd level support for an enterprise-wide, distributed Microsoft Entra ID and Active Directory, including related technologies such as AAD Connect, SSO, the Graph API, etc.

Qualifications

Required

• 7 years of relevant IT experience
• Demonstrated experience in a high-tech customer-facing role (i.e. Professional Services, Solution Architecture, Systems Administrator, Engineering or Consulting)
• Hands-on experience with Microsoft Entra ID, Active Directory, Microsoft Windows Server and related technologies; experience providing senior level operational support and implementation of large-scale, enterprise level solutions
• Previous experience with the design of infrastructure and integration into new and existing authentication services like Entra ID and AD services
• Five years of demonstrated experience supporting Active Directory or Microsoft Entra ID
• In-depth and thorough understanding of monitoring best practices preferably with Splunk, Microsoft EndPoint Configuration Manager (MECM) and/or Quest Change Auditor
• Experience with infrastructure and server theories, principles and concepts, application infrastructure and standards, networking fundamentals, physical server architecture, and virtualization technologies (i.e. VMware, Hyper-V and LAN/WAN/Firewall/VPN networks
• Power Shell scripting experience
• Hands-on experience with Multi-Factor Authentication, SSO, and SSL certificates implementation and management
• Understand WAN/LAN concepts and the TCP/IP protocol stack

Preferred

• Bachelor’s degree in Information Technology; Computer Science or related technical field
• Microsoft Windows Server certifications; Azure Certifications or MCSE
• Working knowledge of ticketing systems; creating, updating and closing tickets
• Strong customer service customer service skills (both written and verbal)
• Excellent interpersonal skills, ability to listen and understand what is being described
• Experience with one or more cloud providers such as Azure, AWS, or Google Cloud Platform
• Ability to effectively deliver and execute technical projects across multiple engagements in customer-facing-capacity

Start Date: 28-Sep-2026

End Date: 31-Aug-2028

Travel Required: No

Base Pay Range: $58.22/hr - $84.62/hr

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location.

Equal Opportunity

We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.

Our full EEO & Non-Discrimination statement is on our careers home page, and you can read more about your rights and view government notices here.

Accessibility Support

TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.

If You Are a U.S. Applicant And Desire a Reasonable Accommodation To Complete a Job Application Please Use One Of The Below Options To Contact Our Accessibility Support Team:

Phone: [phone]

Email: [e-mail]

Drug and Smoking Policy

TIAA maintains a drug-free and smoke/free workplace.

Privacy Notices

For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here.

For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here.

For Applicants of TIAA Global Capabilities, click here.

For Applicants of Nuveen residing in Europe and APAC, please click here.

This role will provide lead level solution architecture, engineering design, implementation and technical third-level support services for Microsoft Entra, Microsoft Active Directory and the Windows Server platform across our enterprise. This includes authentication services in Entra ID, (Azure Active Directory), and on-prem AD. The core infrastructure technology tasking includes enterprise standards for authentication services including: SSO for SaaS applications using modern authentication protocols such as SAML and OAuth2, other authentication services such as Kerberos and LDAP, global system security standards and top-level support for enterprise-wide infrastructure applications.

Preferred

• Bachelor’s degree in Information Technology; Computer Science or related technical field
• Microsoft Windows Server certifications; Azure Certifications or MCSE
• Working knowledge of ticketing systems; creating, updating and closing tickets
• Strong customer service customer service skills (both written and verbal)
• Excellent interpersonal skills, ability to listen and understand what is being described
• Experience with one or more cloud providers such as Azure, AWS, or Google Cloud Platform
• Ability to effectively deliver and execute technical projects across multiple engagements in customer-facing-capacity