Principal Engineer - Cloud Security DevOps [T500-27143]

TMUS Global Solutions; Hyderabad; On-site; INR 4,000,000 - 9,000,000; Full time

Job summary

TMUS Global Solutions, Hyderabad, seeks a Principal Software Engineer to design, implement, and secure scalable cloud infrastructure across AWS and Azure, with a focus on DevSecOps and secure-by-design systems.

You will mentor peers, drive IAM governance, manage logging/monitoring pipelines, and integrate CNAPP tools like Wiz, Prisma Cloud, and Orca while advancing the company’s cloud security strategy.

Qualifications

• Bachelor's degree in computer science, engineering, or related field.
• 10+ years of cloud engineering, DevSecOps, or cloud security experience.
• Hands-on with AWS and/or Azure services and architectures.
• IAM, security policies, roles, and access automation experience.
• GitOps, Terraform, and Ansible for cloud provisioning and configuration management.

Responsibilities

• Design secure cloud infra and automation across AWS and Azure.
• Build GitOps-driven workflows for provisioning and deployment.
• Develop golden images for servers, containers, and VMs.
• Manage IAM policies, roles, and federations for secure access.
• Implement cloud logging, monitoring, and observability frameworks.
• Integrate CNAPP tools like Wiz for risk detection and compliance.
• Develop IaC with Terraform and automate security tests.
• Mentor engineers and document security designs.

Skills

DevSecOps

GitOps

IAM

Terraform

Ansible

Python

Go

AWS

Azure

Kubernetes

Education

Bachelor's degree

Tools

Wiz

Prisma Cloud

Orca

Terraform

Docker

Kubernetes

Job description

T-Mobile US, Inc. (NASDAQ: TMUS), headquartered in Bellevue, Washington, is America’s supercharged Un-carrier, connecting millions through its strong nationwide network and flagship brands, T-Mobile and Metro by T-Mobile. Customers benefit from an unmatched combination of value, quality, and exceptional service experience.

About TMUS Global Solutions:

TMUS Global Solutions is a world-class technology powerhouse accelerating the company’s global digital transformation. With a culture built on growth, inclusivity, and global collaboration, the teams here drive innovation at scale, powered by bold thinking.

TMUS India Private Limited operates as TMUS Global Solutions.

About the Role:

The Principal Software Engineer plays a key role in designing, implementing, and securing scalable cloud infrastructure across AWS and Azure environments. This role focuses on developing and automating cloud security solutions, implementing GitOps-driven workflows, managing IAM and identity governance, and deploying secure‑by‑design systems using modern DevSecOps practices. The engineer will build and manage logging, monitoring, and configuration management pipelines, integrate CNAPP tools like Wiz for threat detection and compliance, auto remediation capabilities and contribute to T‑Mobile's overall cloud security strategy. This individual will also mentor peers, influence architectural decisions, and ensure alignment with T‑Mobile's enterprise security and compliance standards.

We pride ourselves on encouraging a culture of innovation, agile ways of working, and transparency in all we do. Join us in embodying the spirit of the Un-carrier and make a tangible impact!

What You'll Do:

• Design, develop, and implement secure cloud infrastructure and automation pipelines across AWS and Azure.
• Build and maintain GitOps-driven workflows for cloud provisioning, configuration, and deployment.
• Develop and maintain golden images (e.g., hardened AMIs, Azure VM templates, container base images) to standardize secure deployments.
• Implement and manage Identity and Access Management (IAM) policies, roles, and federations for secure access control.
• Develop and integrate cloud logging, monitoring, and observability solutions (e.g., CloudWatch, Azure Monitor, ELK, Prometheus).
• Use Ansible for configuration management and automation of cloud and security environments.
• Deploy and manage Cloud‑Native Application Protection Platforms (CNAPP) such as Wiz for risk detection, compliance, and posture management.
• Develop infrastructure as code (IaC) using Terraform for consistent and secure resource provisioning.
• Write automation and tooling scripts in Python and Go to enhance cloud security and operations.
• Collaborate with DevOps, Security, and Application teams to integrate CI/CD and security automation.
• Participate in threat modeling, security assessments, and remediation of vulnerabilities.
• Document architecture, design decisions, and security configurations.
• Mentor junior engineers and foster best practices in cloud security engineering.

What You'll Bring:

• Bachelor's degree in computer science, Engineering, or related field.
• 10+ years of experience in cloud engineering, DevSecOps, or cloud security roles.
• Strong hands‑on experience with AWS and/or Azure services and architectures.
• Proven ability to build, harden, and maintain golden images for servers, containers, and virtual machines.
• Deep knowledge of IAM, security policies, roles, and access automation.
• Proven experience with GitOps, Terraform, and Ansible for cloud provisioning and configuration management.
• Experience building and maintaining cloud monitoring, logging, and alerting frameworks.
• Familiarity with CNAPP platforms (e.g., Wiz, Prisma Cloud, Orca, etc.) and CSPM/CWPP principles.
• Proficiency in at least one modern Automation programming language (e.g., Python and/or Go).
• Experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).
• Strong problem‑solving, analytical thinking, and collaboration skills.
• Excellent written and verbal communication skills.

Must Have Skills:

• Cloud security engineering,
• GitOps, IAM.
• IAC Tools - Terraform, Ansible
• Hands on in Programming - Python/Go scripting.
• Cloud logging & monitoring, golden image creation, and CI/CD integration.

Nice-to-Have:

• Experience with policy-as-code and compliance automation frameworks.
• Knowledge of network security principles, including firewalls, VPCs, and service mesh.
• Familiarity with DevSecOps, Zero Trust, and security observability frameworks.
• Exposure to GenAI tools or security automation through machine learning (nice to have).