Sr Engineer, Software

Sr Software Engineer - Ops Automation - Public Cloud

About the Role:

The Senior Engineer, Operations Automation Cloud at T-Mobile drives intelligent automation to simplify and optimize day-to-day operations across AWS and Azure environments. This role focuses on analyzing operational challenges, designing repeatable automation solutions, and improving efficiency, reliability, and scalability in cloud infrastructure. The engineer develops and secures scalable cloud environments, builds automation frameworks for provisioning, monitoring, and remediation, and integrates tools like Wiz for compliance and threat detection. They also mentor peers, influence automation architecture, and ensure all solutions align with T-Mobiles enterprise security and operational standards.

What Youll Do:

• Design, develop, and implement secure cloud infrastructure and automation pipelines across AWS and Azure.
• Build and maintain GitOps-driven workflows for cloud provisioning, configuration, and deployment.
• Develop and maintain golden images (e.g., hardened AMIs, Azure VM templates, container base images) to standardize secure deployments.
• Implement and manage Identity and Access Management (IAM) policies, roles, and federations for secure access control.
• Develop and integrate cloud logging, monitoring, and observability solutions (e.g., CloudWatch, Azure Monitor, ELK, Prometheus).
• Use Ansible for configuration management and automation of cloud and security environments.
• Develop infrastructure as code (IaC) using Terraform for consistent and secure resource provisioning.
• Write automation and tooling scripts in Python and Go to enhance cloud security and operations.
• Collaborate with DevOps, Security, and Application teams to integrate CI/CD and security automation .
• Participate in threat modeling, security assessments, and remediation of vulnerabilities.
• Document architecture, design decisions, and security configurations.
• Mentor junior engineers and foster best practices in cloud security engineering.

What Youll Bring:

• Bachelors degree in computer science, Engineering, or related field.
• 58 years of experience in cloud engineering, DevSecOps, or cloud security roles.
• Strong hands-on experience with AWS and/or Azure services and architectures.
• Proven ability to build, harden, and maintain golden images for servers, containers, and virtual machines.
• Deep knowledge of IAM , security policies, roles, and access automation.
• Proven experience with GitOps , Terraform , and Ansible for cloud provisioning and configuration management.
• Experience building and maintaining cloud monitoring, logging, and alerting frameworks.
• Proficiency in at least one modern programming language (e.g., Python, Go)
• Experience integrating security into CI/CD pipelines and containerized environments (Docker, Kubernetes).
• Strong problem-solving, analytical thinking, and collaboration skills.
• Excellent written and verbal communication skills.

Must Have Skills:

• Cloud security engineering, GitOps, IAM, Terraform, Ansible, CNAPP (e.g., Wiz. Prisma Cloud), Python/Go scripting, Cloud logging & monitoring, golden image creation, and CI/CD integration. APIs, Building and developing , Git based technologies, how to design and build GitOps, Infra as code is a must - Terraform or similar
• Automation scripting - Ansible or similar (creating automation)
• Strong Fundamentals of CNAPP are mandatory

Nice To Have:

• Experience with policy-as-code and compliance automation frameworks.
• Knowledge of network security principles, including firewalls, VPCs, and service mesh.
• Familiarity with DevSecOps , Zero Trust , and security observability frameworks.
• Exposure to GenAI tools or security automation through machine learning (nice to have).
• Familiarity with CNAPP platforms (e.g., Wiz, Prisma Cloud, Orca, etc.) and CSPM/CWPP principles.

TMUS India Private Limited, operating as TMUS Global Solutions, has engaged ANSR, Inc. ("ANSR") as its exclusive recruiting partner. That meansthat any communications regarding TMUS Global Solutions opportunities or employment offers will be issued only through ANSR and the 1Recruit platform. If you receive a communication or offer from another individual or entity, please notify TMUS Global Solutions immediately.

TMUS Global Solutions willnever seek any payment or other compensation during the hiring process or request sensitive personal data (such as bank details or government-issued identification numbers) prior to a candidates acceptance of a formal offer.