Principal Engineer – Identity Security

At T-Mobile, we invest in YOU!  Our Total Rewards Package ensures that employees get the same big love we give our customers.  All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!

Job Overview
The Principal Identity Engineer will serve as the day-to-day technical and strategic lead for T-Mobile’s identity verification program. This role blends deep technical engineering expertise with hands-on program and project management responsibilities. The ideal candidate is a proactive leader who will partner closely with stakeholders to deliver a vision for workforce identity assurance—while also independently crafting and executing strategic extensions of the program.

This position requires extensive experience developing solutions within the Microsoft Azure ecosystem, including Entra ID. The Principal Identity Engineer will be expected to leverage Microsoft Graph API and other scripting interfaces (PowerShell, Python, Java) to integrate and optimize enterprise identity tools. This role provides leadership, mentorship, and technical authority across identity architecture, automation, and compliance.

Job Responsibilities

• Leads execution and evolution of identity verification programs across a wide range of enterprise platforms.
• Translates identity vision into technical requirements and implementation plans aligned with business outcomes.
• Develops and manages large-scale program plans, timelines, and collaborator communications.
• Designs and delivers automation solutions and integrations using PowerShell, Python, Java, and Microsoft Graph API.
• Serves as an expert in Microsoft Azure cloud identity tools, particularly Entra ID, Azure AD, and conditional access policy management.
• Surfaces insights from identity platform data to drive reporting, compliance, and service improvements.
• Collaborates with cybersecurity, IT, compliance, and engineering leadership to ensure alignment with enterprise strategy.
• Mentors engineers and analysts, promoting a strong culture of delivery, autonomy, and innovation.

Education and Work Experience

• Bachelor's Degree Computer Science or Information Technology or equivalent work experience.
• 7-10 years Experience with increasing responsibility with security related software and/or business process design.
• 4-7 years Experience with the following: project/team lead, formal implementation SDLC, facilitation of cross-functional solution design teams.
• 4-7 years Technical Project Management
• Previous Leadership experience
• Be authority in multiple security subject areas
• Experience with high level design architecture, security technologies, networking, web services and SOA.
• Domain expert in all facets of network & information security, including Firewall policy design, SSL Certificate management, vulnerability analysis & mitigation, and other topics as assigned.

Preferred Knowledge, Skills and Abilities

• Demonstrated ability to independently drive outcomes and strategic roadmap delivery
• Strong program and project management skill.
• Deep understanding of Microsoft Entra ID, Azure AD, Graph API, and enterprise access control models 
• Expert-level automation and scripting skills (PowerShell, Python, Java preferred)
• Strong executive communication, multi-functional collaboration, and partner management

Licenses and Certifications

• Certified Information Systems Security Professional (CISSP) CISSP and/or CCSK and/or CCSP and/or CISA/CISM certification a plus (Preferred)
• Certified Information Security Manager (CISM) (Preferred)
• Certified Information Systems Auditor (CISA) (Preferred)

Our team is dynamic where no day is the same, and we are a diverse and inclusive team passionate about growth and innovation! If you're up to the challenge, apply today!

• At least 18 years of age
• Legally authorized to work in the United States

Travel:
Travel Required (Yes/No): Yes

DOT Regulated:
DOT Regulated Position (Yes/No): No
Safety Sensitive Position (Yes/No): No

Base Pay Range: $127,800 - $230,700

Corporate Bonus Target: 20%

The pay range above is the general base pay range for a success