Lead Cloud Engineer

TIAA

Confirmed live 2 days ago High trust
Hybrid

Quick summary

Work type
Hybrid
Location
NCTXILNJGA
Posted
2 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

How this pay compares to similar roles

Similar $198k
$174k most similar roles pay here $231k

This listing doesn't post a salary. Most similar roles pay $184,987–$211,200.

Based on 240 similar postings.

Employer

About TIAA

TIAA (Teachers Insurance and Annuity Association of America) is a leading Fortune 100 financial services organization and a premier provider of retirement services in the academic, research, medical, cultural, and governmental fields.

TIAA currently has 11 open roles on FindRole.

Most-posted roles

View all roles at TIAA

At a glance

TL;DR · Lead Cloud Engineer

Lead Cloud Engineer serves as the primary technical builder and delivery owner for PIVOT, an initiative focused on automating vulnerability management, patching, access governance, and configuration compliance across a Data Protection and Storage platform estate. This role involves converting prototypes into production-grade automation to manage systems including PPDM, Data Domain, Avamar, Rubrik, and NetApp ONTAP. Key responsibilities include building orchestrated patching playbooks, developing CVE-to-asset correlation services, implementing configuration drift detection via ActiveIQ and REST APIs, and creating automated deprovisioning workflows for backup access. The ideal candidate possesses expertise in Python or PowerShell scripting, credential vaulting tools like CyberArk or HashiCorp Vault, and experience with infrastructure-as-code. The role requires technical proficiency in data protection and storage infrastructure to solve critical security challenges such as anti-ransomware controls and automated secret rotation within enterprise environments.

What you'll do

  • Build orchestrated patching playbooks with pre/post validation for PPDM, Data Domain, Avamar, Rubrik, and ONTAP platforms.
  • Develop a CVE-to-asset correlation service against live platform inventory to automate vulnerability management.
  • Create automated backup posture validations covering immutability, retention locks, replication, and anti-ransomware controls.
  • Implement configuration drift detection using ActiveIQ and ONTAP REST APIs for security-critical settings.
  • Build automated deprovisioning workflows for backup admin access tied to HR and IAM events.
  • Integrate vault-based credential rotation for all backup automation service accounts.
  • Produce audit-ready documentation and evidence artifacts for every automated control implemented.
  • Convert existing prototypes into production-grade automation on a compressed 60–90 day delivery timeline.

What we're looking for

  • 7+ years of relevant IT experience with hands-on work in data protection, backup, and storage infrastructure.
  • Experience administering and engineering solutions on PPDM, Data Domain, ECS, Rubrik, and/or NetApp ONTAP in enterprise environments.
  • Proven experience building automation and orchestration tooling using scripting, APIs, and playbooks.
  • Strong scripting ability in PowerShell, Python, or similar languages for building integrations and automation.
  • Working knowledge of vulnerability management concepts including CVE tracking, patch cycles, and asset correlation.
  • Experience with REST API integration, specifically with NetApp ActiveIQ and/or ONTAP APIs.
  • Experience with credential vaulting and automated secrets rotation using tools like CyberArk or HashiCorp Vault.
  • Ability to produce technical documentation and audit-ready evidence artifacts for production-grade solutions.
  • University degree in Information Technology, Computer Science, or a related field (preferred).
  • Vendor certifications relevant to Dell PowerProtect, Rubrik, or NetApp platforms (preferred).
  • Experience with security configuration baselining, drift detection, FIPS compliance, and anti-ransomware controls (preferred).

More like this

Similar roles

Lead Cloud Engineer

TIAA

Chicago, IL +3 66 days ago
AWS Python Terraform CloudBees Flask Java S3 CI/CD Data Pipelines ETL ELT MCP Services Agentic AI Splunk Rubrik Data Domain Dell Networker CloudWatch MLOps
5+ yrs exp

Lead Software Engineer, Cloud Engineer

JPMorgan Chase

Jersey City, NJ 79 days ago
AWS Java Golang Terraform CI/CD Linux UNIX Automation Testing Security AI-assisted Engineering Networking Firewalls
5+ yrs exp

Cloud Engineer Team Lead

General Dynamics

Bethesda, MD 23 days ago $142,792$189,750
AWS Azure Terraform Ansible Git GitHub Infrastructure as Code Agile Scrum ITIL Automation AI DevOps
10+ yrs exp Hybrid

Lead Software Engineer, Cloud Architect

JPMorgan Chase

Jersey City, NJ 31 days ago
AWS Java Python React Micro Services Spring Boot Kubernetes Kafka Databricks Graph QL Oracle Cloud Computing CI/CD DevOps Data Mesh Distributed Systems Data Pipelines Hybrid Cloud SDLC

Lead Software Engineer, Cloud AI Engineer

JPMorgan Chase

Plano, TX 28 days ago
Python AWS Terraform Django React RAG LLM LangChain LlamaIndex CrewAI Pinecone Weaviate pgvector Chroma Databricks CI/CD GitHub Copilot Claude Data Engineering
5+ yrs exp

Cloud Services Lead Software Engineer

Allstate

Remote (IL) 31 days ago $100,000$170,500
AWS Microsoft Azure Apache Kafka Spring Boot Docker Kubernetes RabbitMQ Git Infrastructure as Code Microservices Architecture API Development Test-Driven Development Load Testing Database Administration
5+ yrs exp Remote