Senior Engineer, Cybersecurity [T500-24239]

About T-Mobile: T-Mobile US, Inc. (NASDAQ: TMUS), headquartered in Bellevue, Washington, is America’s supercharged Un-carrier, connecting millions through its strong nationwide network and flagship brands, T-Mobile and Metro by T-Mobile. Customers benefit from an unmatched combination of value, quality, and exceptional service experience.

About TMUS Global Solutions: TMUS Global Solutions is a world-class technology powerhouse accelerating the company’s global digital transformation. With a culture built on growth, inclusivity, and global collaboration, the teams here drive innovation at scale, powered by bold thinking. TMUS India Private Limited operates as TMUS Global Solutions.

What You’ll DO:

• Conducts deep network traffic flow and security assessments, zero trust reviews, and vulnerability testing to identify and mitigate risks
• Lead the strategic architecture, engineering, and operational governance of Zscaler and enterprise SASE/SSE platforms, driving secure access transformation through policy design, zero trust enforcement, and advanced threat protection; champion automation-first principles by integrating CI/CD pipelines, infrastructure-as-code, and API-driven workflows to continuously optimize policy lifecycle management, reduce operational risk, and scale secure connectivity across hybrid and cloud-native environments.
• Spearhead the end-to-end lifecycle of network security by managing complex firewall policies, performing rigorous root cause analysis to drive problem management initiatives, and leveraging software development skills to automate defensive workflows and remediate underlying system vulnerabilities.
• Manage day-to-day administration and automation of firewall, WAF, segmentation, and similar Zero Trust solutions.
• Develops proactive security measures, strategies, operational processes to enhance the security posture across various technologies through the enterprise zero trust capabilities.
• Proactively identifies security risks and deploys effective mitigation measures to safeguard the company's systems and data.
• Collaborate with senior engineers and other cybersecurity teams to address potential security issues and remediation.
• Apply and maintain security best practices, including system hardening, traffic analysis, interpreting network activity, and compliance activities.
• Monitor and maintain cybersecurity systems performance, operations, capacity, and availability.
• Troubleshoot and resolve cybersecurity incidents or issues related to FW, WAF, segmentation, and other Zero Trust scenarios in enterprise environments.
• Participate in innovation and automation efforts and recommend tools and process improvements.
• Perform additional duties and projects assigned.

What You’ll Bring:

• Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent experience).
• 7 plus years of experience in Zero Trust solutions such as Zscaler, WAF, Firewall, segmentation, and related technology engineering or administration.
• Hands-on experience implementing and managing security solutions in the enterprise.
• Experience delivering automation solutions and capabilities with python, terraform, ansible, and similar tools for cybersecurity configuration management and orchestration.
• Strong understanding of cybersecurity security, network segmentation, FW and WAF configuration management, and compliance standards.
• Strong troubleshooting and problem-solving skills.
• Effective communication, customer service, and collaboration abilities.

Must Have Skills:

• Hands on proficiency with one or more Zero Trust solutions (Akamai WAF, Checkpoint FW, Illumio network segmentation, Island browser policy, or Zscaler in large network environments to include operations and automation.
• Expertise in network information security, including Firewall, WAF, and Micro segmentation traffic analysis and policy design, SSL Certificate management, and vulnerability analysis mitigation.
• Experience with Ansible, python, or terraform for configuration automation and system management.
• Strong understanding of cybersecurity fundamentals, hardening, and access control.
• Proficiency with enterprise security monitoring using such tools such as Wireshark, Netflow, or Splunk.
• Ability to troubleshoot and resolve issues in complex, distributed environments.

Nice To Have:

• Proficiency with cloud computing and automation platforms.
• Exposure to containerized environments (Kubernetes, OpenShift) on Linux.
• Advanced knowledge of infrastructure as code (IaC) and DevOps tools.
• Scripting/programming experience in python