About the position
At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That's how we're UNSTOPPABLE for our employees! The System Reliability Engineer (SRE) improves and protects the software and systems behind all of T-Mobile's IT services, including management of scalability, availability, latency, performance, security, and capacity, and delivery of software faster, better, and cheaper. From designing & maintaining CICD Pipelines to building the next generation of T-Mobile applications on cloud native platforms, the SRE's enable great customer experience and product innovation by continuous improvement of operational support. We are looking for a detail-oriented Entra ID and Active Directory Administrator to support and manage our identity infrastructure across both cloud and on-prem environments. In this role, you will be responsible for maintaining and supporting Microsoft Entra ID (formerly Azure AD) and Active Directory environments, ensuring that identity-related services are reliable, secure, and compliant with internal policies and regulatory standards. The ideal candidate will bring hands-on experience managing user access, group policies, directory synchronization, conditional access, and other identity components within Microsoft ecosystems. You will also be expected to support routine identity lifecycle tasks, respond to access-related incidents, and assist in audits and security reviews. This role is vital in protecting our organization's identity posture, minimizing risk, and supporting a seamless user access experience across platforms.
Responsibilities
- Utilizes fluent knowledge and skill in emerging DevOps-centric automation tools and technologies for CICD, configuration management, etc. for non-prod environments.
- Performs environment management, automated server provisioning, pipeline configuration (VMs).
- Creates, manages, and uses dashboard for continuous monitoring and health check of applications, and the underlying infrastructure, improves the quality of services using the monitoring feedback for non-production environment.
- Contributes to future improvement of software delivery processes and operations, e.g., cloud enablement, and use of microservices with containerization.
- Identity management in AD and Entra ID.
- Support Single Sign On (SSO) onboarding of SaaS/IaaS applications into Entra ID in collaboration with app teams.
- Apply access policies using built-in RBAC, conditional access, and Multi-Factor Authentication (MFA) settings—based on existing frameworks.
- Help enforce least-privilege principles by managing role-based groups and permissions.
- Develop and maintain automation to streamline identity management processes.
- Configure and maintain Microsoft Entra tenant settings under supervision, ensuring alignment with org standards.
- Support day-to-day operations of on-premises Active Directory (AD) and Microsoft Entra ID (Azure AD), including Organizational Unit (OU) and domain hygiene.
- Maintain Group Policy Objects (GPOs) by applying, modifying, and troubleshooting as directed.
- Run patch and update routines related to identity infrastructure tools and services.
- Monitor logs and system alerts for suspicious identity activity and escalate anomalies.
- Apply organization-defined conditional access and MFA settings under guidance.
- Support password policy enforcement and account lockout thresholds.
- Perform incident analysis to identify root causes and implement corrective actions to prevent recurrence.
- Troubleshoot AD/Entra ID authentication and synchronization using Microsoft Identity Synchronization tools.
- Participate in on-call rotations for identity-related incidents.
- Collaborate on incident response and access management projects with Cyber Security, Compliance, and application teams.
- Coordinate with app owners for integration of apps into Entra ID SSO (under guidance).
- Provide support to end-users facing identity-related issues.
- Assist in creating internal KBs, SOPs, and how-to guides for repeatable tasks.
- Assist in small-group training or onboarding sessions for new identity-related tools.
- Run scheduled identity audits to check group memberships, stale accounts, and policy compliance.
- Generate basic reports on system usage, access patterns, and incidents using native or third-party tools.
- Help document and maintain identity governance policies and procedures.
- Contribute feedback to senior team members on improving identity workflows and controls.
Requirements
- Bachelor's Degree
- 2-4 years Relevant experience.
- Experience working in an Agile and DevOps environment.
- Experience in one or more of: C, C#, Java, Perl, Python, Go, or scripting experience in Shell and Perl.
- Experience in Continuous Integration/Continuous Delivery tools, such as, Jenkins, Cloudbees, etc., and other automation tools.
- Experience with DevOps tools, such as, Ansible, Chef, Puppet, etc.
- Experience in Docker, Kubernetes, etc. is preferable.
- Experience in APM tool, like, AppDynamics, logging tool, like Splunk.
- Experience working in a cloud environment (public/private).
Nice-to-haves
- Experience in migrating to cloud or cloud native environments experience is preferable.
- Cloud Computing knowledge.
Benefits
- Medical, dental and vision insurance
- Flexible spending account
- 401(k)
- Employee stock grants
- Employee stock purchase plan
- Paid time off and up to 12 paid holidays
- Paid parental and family leave
- Family building benefits
- Back-up care
- Enhanced family support
- Childcare subsidy
- Tuition assistance
- College coaching
- Short- and long-term disability
- Voluntary AD&D coverage
- Voluntary accident coverage
- Voluntary life insurance
- Voluntary disability insurance
- Voluntary long-term care insurance
- Mobile service & home internet discounts
- Pet insurance
- Access to commuter and transit programs
