Sr Engineer, Software - Oracle/MySQL DBA [T500-27552]

About T-Mobile: T-Mobile US, Inc. (NASDAQ: TMUS), headquartered in Bellevue, Washington, is America’s supercharged Un-carrier, connecting millions through its strong nationwide network and flagship brands, T-Mobile and Metro by T-Mobile. Customers benefit from an unmatched combination of value, quality, and exceptional service experience.

About TMUS Global Solutions: TMUS Global Solutions is a world-class technology powerhouse accelerating the company’s global digital transformation. With a culture built on growth, inclusivity, and global collaboration, the teams here drive innovation at scale, powered by bold thinking. TMUS India Private Limited operates as TMUS Global Solutions. The Database Security Engineer plays a critical role in designing, implementing, administering, securing, and maintaining enterprise Oracle and MySQL database platforms. This role combines expert DBA capabilities with deep specialization in database security architecture, Zero Trust, privileged access management, encryption, auditing, vulnerability management, compliance, and security automation. The engineer partners closely with Cybersecurity, Infrastructure, Cloud Engineering, DevOps, and Application teams to protect enterprise data while maintaining highly available, resilient database services.

What You'll Do:

• Perform full lifecycle DBA activities including installation, configuration, patching, upgrades, backup/recovery, migrations, HA/DR, replication, performance tuning, automation, and cloud database administration. Database Security Engineering
• Design secure database architectures aligned with Zero Trust principles.
• Implement CIS hardening standards and database security baselines.
• Administer authentication, authorization, RBAC, least-privilege access, and privileged account governance.
• Configure Oracle TDE, Oracle Key Vault, SSL/TLS encryption, database auditing, and encryption key lifecycle management.
• Implement and administer Imperva Database Activity Monitoring (DAM) for real-time monitoring, auditing, anomalous access detection, and Splunk Enterprise Security integration.
• Partner with security teams supporting Imperva Web Application Firewall (WAF) integrations protecting database-backed applications.
• Coordinate with Cybersecurity to maintain Illumio Zero Trust Micro segmentation policies protecting database workloads.
• Integrate database authentication with Microsoft Entra ID (Azure AD) where applicable.
• Administer privileged database credentials using CyberArk Privileged Access Management (PAM).
• Perform vulnerability remediation using findings from Tenable and enterprise vulnerability management platforms.
• Develop compliance reporting supporting PCI-DSS, SOX, HIPAA, NIST, CIS, and enterprise security standards.
• Support incident response, forensic investigations, and participate in 24x7 production operations.

What You'll Bring:

• Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, or related field.
• 5+ years of enterprise Oracle and/or MySQL/PostgreSQL DBA experience.
• Strong knowledge of database security controls, IAM, encryption, auditing, SIEM integration, vulnerability remediation, and cloud database security.
• Experience with automation using Python, Bash, PowerShell, Terraform, or Ansible.
• Experience supporting internal and external audits is preferred, including evidence collection, control walkthroughs, and remediation tracking for SOX 404 testing, PCI QSA assessments, or similar third-party reviews.
• Working knowledge of IT General Controls (ITGCs), SOX, PCI-DSS, NIST, and CIS security frameworks.
• Excellent analytical, troubleshooting, and communication skills.

Must-Have Skills:

• Database Administration (Oracle or MySQL/PostgreSQL)
• Database Security Administration
• Database Development
• Identity & Access Management (IAM)
• Python, Bash, or PowerShell
• Data Modeling
• Security Compliance & Auditing

Preferred Skills:

• Oracle Database Vault, Audit Vault, Data Safe, Key Vault, TDE, Enterprise Manager, OCI.
• MySQL/PostgreSQL
• MySQL Enterprise Firewall, MySQL Enterprise Audit, PostgreSQL pgAudit.
• Enterprise Security
• Imperva DAM, Imperva WAF, Illumio, Microsoft Entra ID, CyberArk PAM, Tenable, Splunk Enterprise Security, Microsoft Sentinel.
• Cloud & Automation
• AWS, Azure, OCI, Terraform, Ansible, Docker, Kubernetes, GitHub Actions, Jenkins, Azure DevOps.
• Observability Prometheus, Grafana, Splunk, OpenTelemetry, Dynatrace.

Professional Certifications:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CCSP (Certified Cloud Security Professional)
• Oracle Certified Professional (OCP)
• MySQL Database Administrator Certification
• AWS, Azure, or OCI Security certifications are a plus.

Key Responsibilities:

• Database Administration
• Database Security Engineering
• Database Hardening
• Zero Trust Security
• Vulnerability Management
• Identity & Access Management
• Privileged Access Management
• Encryption & Key Management
• Security Automation
• Audit & Compliance Reporting
• Cloud Database Security
• Security Architecture
• Operational Excellence