Lead Cloud Engineer
AI summary of the role
Lead Cloud Engineer (contingent worker) for TIAA's PIVOT initiative, automating vulnerability management, patching, access governance, and configuration compliance across data protection and storage platforms (PPDM, Data Domain, Avamar, Rubrik, NetApp ONTAP).
What you’ll do
- Build orchestrated patching playbooks with pre/post validation for PPDM, Data Domain, Avamar, Rubrik, and ONTAP
- Develop CVE-to-asset correlation service against live platform inventory
- Implement configuration drift detection using ActiveIQ and ONTAP REST APIs
- Build automated deprovisioning workflows for backup admin access tied to HR/IAM events
What you’ll bring
- 7+ years of relevant IT experience with hands-on data protection, backup, and storage infrastructure
- Hands-on experience with PPDM, Data Domain, ECS, Rubrik, and/or NetApp ONTAP in enterprise environments
- Proven experience building automation and orchestration tooling (scripting, APIs, playbooks)
- Experience with REST API integration, particularly NetApp ActiveIQ and/or ONTAP APIs
Technologies
PPDM · Data Domain · Avamar · Rubrik · NetApp ONTAP · ActiveIQ · REST API · CyberArk · HashiCorp Vault · PowerShell · Python · SailPoint
Source and classification
Internal deployment & tooling · Evidence for this classification:
changes. Educates end users on system designs and functionalities through creation of training materials and conducting demos. Evaluates the efficiency and effectiveness of application operations and troubleshooting problems. Educational Requirements University (Degree) Preferred Work Experience 5+ Years Required; 7+ Years Preferred Physical Requirements Physical Requirements: Sedentary Work Career Level 8IC This role will serve as the primary technical builder and delivery owner for PIVOT, an initiative to automate vulnerability management, patching, access governance, and configuration compliance across the Data Protection and Storage platform estate, including PPDM, Data Domain, Avamar, Rubrik, and NetApp ONTAP. This is a hands-on engineering role, converting existing prototypes into production-grade automation on a compressed 60–90 day delivery timeline. Responsibilities:
More from the job description
This is a Non-Employee Contingent Worker Role providing services for TIAA’s family of companies and will be employed by TIAA's preferred 3rd Party Supplier. As a Non-Employee CW, perform a variety of moderately complex business planning, support, and project-related duties. Demonstrates an exceptional standard of quality and holds themselves accountable to achieving excellent results. This role will sit onsite, likely in a hybrid capacity, at the location(s) listed in this posting. The anticipated term of this engagement will be 14 months. This term could be extended based on company business needs. CW-Info Systems Engineer IV The Engineering job designs information systems that are appropriate for users' needs and consistent with the overall design of the organization's information systems architecture. Under limited supervision, this job is responsible for the installation, configuration and maintenance of the organization's operating systems. Key Responsibilities and Duties Formulates system scope through research and fact-finding to develop or modify moderately complex information systems. Evaluates and implements changes to existing system logic difficulties and documentation as necessary. Reviews flow charts, models, and procedures and feasibility studies to design possible system solutions. Reviews technical documentation to guide system users and to assist with [... source excerpt omitted ...] and development of the system. Collaborates with system analysts, engineers, and programmers to design systems and to determine project limitations and capabilities, performance requirements, systems performance standards, and interfaces. Identifies and documents all system constraints, implications and consequences of various proposed system changes. Educates end users on system designs and functionalities through creation of training materials and conducting demos. Evaluates the efficiency and effectiveness of application operations and troubleshooting problems. Educational Requirements University (Degree) Preferred Work Experience 5+ Years Required; 7+ Years Preferred Ph [... source excerpt omitted ...] ata Protection and Storage platform estate, including PPDM, Data Domain, Avamar, Rubrik, and NetApp ONTAP. This is a hands-on engineering role, converting existing prototypes into production-grade automation on a compressed 60–90 day delivery timeline. Responsibilities: Build orchestrated patching playbooks with pre/post validation for PPDM, Data Domain, Avamar, Rubrik, and ONTAP, enabling on-disclosure CVE remediation Develop a CVE-to-asset correlation service against live platform inventory Build scheduled backup posture validation covering immutability, retention locks, replication, and anti-ransomware controls; advance existing prototypes to production Implement configurat
Employer postings · Data from · Sources