Sr. Engineer, Cloud Network

T-Mobile•Frisco, TX

4d•$98,300 - $177,300

About The Position

The Sr. Systems Design Engineer (Cloud Network) designs, implements, and operates hybrid cloud network infrastructure connecting T-Mobile’s multi-cloud environment to on-premises datacenters. Key specializations include hub-spoke network architecture, datacenter interconnect design, BGP routing policy, hybrid DNS architecture, and network automation using Terraform and Python. The role owns reliability and SRE accountability for cloud network functions, including on-call responsibilities, and drives automation to reduce manual operational work. Success is measured by the reliability, performance, efficiency, and timely delivery of cloud network solutions. This work supports organizational operations and customer experience through robust, scalable, and secure hybrid network infrastructure. The engineer collaborates asynchronously with distributed teams, supervises and mentors associate engineers, and contributes to runbooks and knowledge documentation. Travel is required.

Requirements

Bachelor’s degree plus 5 years of related work experience, or an advanced degree with 3 years of related experience.
Degree in Computer Science, Computer Engineering, Network Engineering, or a related field.
At least 5 years of hands-on cloud network engineering experience, with specialization in cloud networking; cloud platform generalist or NOC/support-only backgrounds do not meet the stated requirement.
At least 3 years of cloud networking experience with AWS or Azure as the primary networking platform.
Knowledge of hub-spoke cloud network architecture, including AWS Transit Gateway, Azure Virtual WAN, or GCP Network Connectivity Center.
Knowledge of BGP routing and path manipulation, including AS path prepending, local preference, MED, and community strings.
Experience with hybrid datacenter interconnect design and operations using AWS Direct Connect or Azure ExpressRoute.
Knowledge of hybrid DNS architecture, including Route 53 or Azure DNS Private Resolver, conditional forwarding, private hosted zones, and split-horizon DNS.
Experience with Terraform infrastructure-as-code, including state management, remote backends, module authoring, and peer-reviewed change processes.
Python network automation scripting experience using Boto3, Azure SDK, or equivalent, including cross-account operational tasks.
Knowledge of cloud network security, including Security Groups, NACLs, AWS Network Firewall or Azure Firewall policy design, and stateful versus stateless inspection.
Knowledge of multi-account or multi-subscription network governance, including shared VPCs, subnet delegation, and route propagation across account boundaries.
SRE and on-call ownership for production cloud network functions.
Technical writing and asynchronous collaboration skills, including Confluence/Jira, design documentation, and structured communication across distributed teams.
At least 18 years of age.
Legally authorized to work in the United States.

Nice To Haves

Experience with both AWS and Azure as primary networking platforms.
GCP networking experience, including Cloud Router, HA VPN, and Dedicated/Partner Interconnect.
Experience with IP address management tools such as Infoblox, NetBox, AWS VPC IPAM, or Azure IPAM.
IPv6 dual-stack design experience in cloud environments, including addressing, routing, and coexistence with on-premises connectivity.
Device-level BGP experience on Juniper or Cisco hardware.
Certifications such as AWS Advanced Networking Specialty, Azure Network Engineer Associate (AZ-700), CCNP, or JNCIP.

Responsibilities

Design and implement hub-spoke cloud network topologies across AWS, GCP, and Azure, including Transit Gateway, Cloud Router, Virtual WAN, and shared VPC/subnet architectures.
Design, deploy, and operate hybrid datacenter interconnects, including AWS Direct Connect, GCP Interconnect, and Azure ExpressRoute circuits in active-active and active-passive configurations.
Configure and troubleshoot BGP routing policies, including AS path prepending, local preference, MED, and community strings, across cloud-to-datacenter interconnects.
Design and maintain hybrid DNS architecture using Route 53 Private Resolver, Azure DNS Private Resolver, GCP DNS zones, conditional forwarding, and split-horizon DNS.
Configure and manage Azure, AWS, and GCP firewalls, and troubleshoot and resolve related issues.
Author and maintain Terraform modules for network infrastructure, and enforce IaC state management, remote backends, and peer-reviewed change processes.
Automate network operational tasks using Python and Boto3/Azure SDK, including cross-account security group audits, routing validation, and connectivity checks.
Own SRE and on-call responsibilities for cloud network functions, lead post-incident root cause analysis, and eliminate recurring manual remediations.
Collaborate asynchronously with distributed teams using documented designs, Confluence/Jira, and structured async handoffs.
Supervise and mentor associate engineers, and contribute to runbook development and knowledge documentation.
Perform other duties and projects as assigned by business management.

Benefits

Competitive base salary and compensation package.
Annual stock grant and employee stock purchase plan.
401(k) and access to free, year-round money coaches.
Annual bonus or periodic sales incentive or bonus, depending on role and eligibility.
Medical, dental, and vision insurance.
Flexible spending account.
Paid time off and up to 12 paid holidays.
Paid parental and family leave.
Family building benefits, back-up care, enhanced family support, and childcare subsidy.
Tuition assistance and college coaching.
Short- and long-term disability coverage, voluntary AD&D and accident coverage, voluntary life insurance, and voluntary long-term care insurance.
Mobile service and home internet discounts for eligible employees.
Pet insurance for eligible employees.
Commuter and transit programs.