Sr. Engineer, Cloud Network

T-Mobile; Frisco (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health benefits

Job summary

T-Mobile is seeking a Sr. Systems Design Engineer (Cloud Network) to design, implement, and operate hybrid cloud network infrastructure linking multi-clouds to on-prem datacenters. You will own reliability, SRE accountability, and drive automation to reduce toil while ensuring scalable, secure connections.

The role collaborates across distributed teams, mentors engineers, and contributes to runbooks, with opportunities to influence network security, performance, and incident response.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Network Engineering, or related field.
• 5+ years hands-on cloud network engineering experience with a focus on cloud networking.
• 3+ years cloud networking experience using AWS or Azure as primary platform.

Responsibilities

• Design and implement hub-spoke cloud network topologies across AWS, GCP and Azure.
• Own hybrid DC interconnect — design, deploy, and operate AWS Direct Connect, GCP interconnect and Azure ExpressRoute.
• Configure and troubleshoot BGP routing policies across cloud-to-datacenter interconnects.
• Design and maintain hybrid DNS architecture using Route 53 Private Resolver, Azure DNS Private Resolver, and DNS zones.
• Configure and manage Azure, AWS and GCP firewalls and troubleshoot issues.
• Author and maintain Terraform modules for network infrastructure; enforce IaC state management and peer-reviewed changes.
• Automate network tasks using Python and cloud SDKs.
• Own SRE and on-call responsibilities for production cloud network functions.
• Collaborate asynchronously with distributed teams using Confluence/Jira and structured handoffs.
• Supervise and mentor associate engineers; contribute to runbooks and knowledge docs.

Skills

Hub-Spoke Cloud Network Architecture

BGP Routing and Path Manipulation

Hybrid DC Interconnect Design

Hybrid DNS Architecture

Infrastructure-as-Code (Terraform)

Network Automation Scripting (Python)

Cloud Network Security

Multi-Account / Multi-Subscription GW

SRE / On-Call Ownership

Technical Writing / Async Collab

Education

Bachelor’s Degree + 5+ years experience (CS/CE/NE)

Advanced degree + 3+ years experience (CS/CE/NE)

Computer Science / Computer Engineering / Network Engineering related

Tools

Terraform

Python

AWS Direct Connect

Azure ExpressRoute

Route 53 / Azure DNS Private Resolver

Job description

At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!

Are you ready for the next chapter in your Uncarrier journey?

This Sr. Systems Design Engineer (Cloud Network) designs, implements, and operates hybrid cloud network infrastructure connecting T-Mobile’s multi-cloud environment to on-premises datacenters. Core specializations include hub-spoke network architecture, DC interconnect design (AWS Direct Connect / Azure ExpressRoute/GCP Interconnect), BGP routing policy, hybrid DNS architecture, and network automation via Terraform and Python. The role owns reliability and SRE accountability for cloud network functions — including on-call — and drives automation to eliminate manual operational toil. Success is measured by the reliability, performance, efficiency, and timely delivery of cloud network solutions. The work directly impacts organizational operations and customer experience by ensuring robust, scalable, and secure hybrid network infrastructure.

We pride ourselves on encouraging a culture of innovation, advocating for agile methodologies, and promoting transparency in all that we do. Join us in embodying the spirit of the ‘Un-carrier’ and make a tangible impact!

Job Responsibilities:

• Design and implement hub-spoke cloud network topologies across AWS, GCP and Azure, including Transit Gateway, Cloud router, Virtual WAN, and shared VPC/subnet architectures
• Own hybrid DC interconnect — design, deploy, and operate AWS Direct Connect, GCP interconnect and Azure ExpressRoute circuits in active-active and active-passive configurations
• Configure and troubleshoot BGP routing policies (AS path prepending, local preference, MED, community strings) across cloud-to-datacenter interconnects
• Design and maintain hybrid DNS architecture using Route 53 Private Resolver, Azure DNS Private Resolver, GCP DNS zones, conditional forwarding, and split-horizon DNS
• Configure and manage Azure, AWS and GCP firewalls and troubleshoot and fix the issues.
• Author and maintain Terraform modules for network infrastructure; enforce IaC state management, remote backends, and peer-reviewed change processes
• Automate network operational tasks using Python and Boto3/Azure SDK (cross-account security group audits, routing validation, connectivity checks)
• Own SRE and on-call responsibilities for cloud network functions; drive post-incident root cause analysis and eliminate recurring manual remediations
• Collaborate asynchronously with distributed teams (US principal engineers, India peers, datacenter network teams) using documented designs, Confluence/Jira, and structured async handoffs
• Supervise and mentor associate engineers; contribute to runbook development and knowledge documentation
• Also responsible for other duties/projects as assigned by business management as needed

Education and Work Experience:

• Bachelor’s Degree plus 5 years of related work experience OR Advanced degree with 3 years of related experience (Required)
• Acceptable areas of study include Computer Science, Computer Engineering, Network Engineering, or related field (Required)
• 5+ years of hands‑on cloud network engineering experience; specialization in cloud networking required — cloud platform generalist or NOC/support‑only backgrounds do not meet the bar (Required)
• 3+ years of cloud networking experience with AWS or Azure as the primary networking platform (Required)

Required Knowledge, Skills and Abilities:

• Hub-Spoke Cloud Network Architecture (AWS Transit Gateway, Azure Virtual WAN, or GCP Network Connectivity Center)
• BGP Routing and Path Manipulation (AS path prepending, local preference, MED, community strings)
• Hybrid DC Interconnect Design and Operations (AWS Direct Connect or Azure ExpressRoute)
• Hybrid DNS Architecture (Route 53 or Azure DNS Private Resolver, conditional forwarding, private hosted zones, split-horizon DNS)
• Infrastructure-as-Code using Terraform (state management, remote backends, module authoring, peer-reviewed change processes)
• Network Automation Scripting in Python (Boto3, Azure SDK, or equivalent; cross-account operational tasks)
• Cloud Network Security (Security Groups, NACLs, AWS Network Firewall or Azure Firewall policy design; stateful vs. stateless inspection)
• Multi-Account / Multi-Subscription Network Governance (shared VPCs, subnet delegation, route propagation across account boundaries)
• SRE and On-Call Ownership for production cloud network functions
• Technical Writing and Async Collaboration (Confluence/Jira, design documentation, structured async communication across distributed teams)

Preferred Knowledge, Skills and Abilities:

• Experience with both AWS and Azure as primary networking platforms
• GCP networking (Cloud Router, HA VPN, Dedicated/Partner Interconnect)
• IP Address Management (IPAM) tools: Infoblox, NetBox, AWS VPC IPAM, or Azure IPAM
• IPv6 dual‑stack design in cloud environments (addressing, routing, dual‑stack coexistence with on‑premises connectivity)
• Device-level BGP experience on Juniper or Cisco hardware
• Certifications: AWS Advanced Networking Specialty, Azure Network Engineer Associate (AZ‑700), CCNP, or JNCIP

• At least 18 years of age
• Legally authorized to work in the United States

Travel Travel Required (Yes/No): Yes

DOT Regulated DOT Regulated Position (Yes/No): No Safety Sensitive Position (Yes/No): No

Total Target Cash Earnings Opportunity: $113,045 - $203,895National Base Pay Range: $98,300 - $177,300

The Total Target Cash Earnings Opportunity represents the expected total cash compensation for this role at target performance, combining base salary and annual incentive opportunity. Actual earnings may be higher or lower depending on individual performance and overall company results.

The base pay range reflects the compensation component of this opportunity. The candidate’s actual pay will be based on various factors, such as work location, qualifications, and experience, so the actual starting pay will vary within this range. To find the pay range for this role based on hiring location, click here.

At T-Mobile, employees in regular, non‑temporary roles are eligible for an annual bonus or periodic sales incentive or bonus, based on their role. Corporate employees are eligible for a year‑end bonus based on individual and/or company performance and which is set at a percentage of the employee’s eligible earnings in the prior year. Certain positions in Customer Care are eligible for monthly bonuses based on individual and/or team performance. The incentive component included in the Total Target Cash Earnings Opportunity reflects target performance. Actual earnings included in the Total Target Cash Earnings Opportunity reflect target performance; actual payouts may vary.

At T-Mobile, our benefits exemplify the spirit of One Team, Together! A big part of how we care for one another is working to ensure our benefits evolve to meet the needs of our team members. Full and part‑time employees have access to the same benefits when eligible. We cover all of the bases, offering medical, dental and vision insurance, a flexible spending account, 401(k), employee stock grants, employee stock purchase plan, paid time off and up to 12 paid holidays - which total about 4 weeks for new full‑time employees and about 2.5 weeks for new part‑time employees annually - paid parental and family leave, family building benefits, back‑up care, enhanced family support, childcare subsidy, tuition assistance, college coaching, short‑and‑long‑term disability, voluntary AD&D coverage, voluntary accident coverage, voluntary life insurance, voluntary disability insurance, and voluntary long‑term care insurance. We don't stop there - eligible employees can also receive mobile service & home internet discounts, pet insurance, and access to commuter and transit programs! To learn about T-Mobile’s amazing benefits, check out www.t-mobilebenefits.com.

Never stop growing!
As part of the T-Mobile team, you know the Un-carrier doesn’t have a corporate ladder–it’s more like a jungle gym of possibilities! We love helping our employees grow in their careers, because it’s that shared drive to aim high that drives our business and our culture forward. By applying for this career opportunity, you’re living our values while investing in your career growth–and we applaud it. You’re unstoppable!

T-Mobile USA, Inc. is an Equal Opportunity Employer. All decisions concerning the employment relationship will be made without regard to age, race, ethnicity, color, religion, creed, sex, sexual orientation, gender identity or expression, genetic information, national origin, religious affiliation, marital status, citizenship status, veteran status, the presence of any physical or mental disability, or any other status or characteristic protected by federal, state, or local law. Discrimination, retaliation or harassment based upon any of these factors is wholly inconsistent with how we do business and will not be tolerated.

Talent comes in all forms at the Un-carrier. If you are an individual with a disability and need reasonable accommodation at any point in the application or interview process, please let us know by emailing [e-mail] or calling 1-844-873-9500. Please note, this contact channel is not a means to apply for or inquire about a position and we are unable to respond to non-accommodation related requests.