Sr Engineer, Software - Cassandra & MongoDB DBA [T500-27565]

About T-Mobile:

T-Mobile US, Inc. (NASDAQ: TMUS), headquartered in Bellevue, Washington, is America’s supercharged Un-carrier, connecting millions through its strong nationwide network and flagship brands, T-Mobile and Metro by T-Mobile. Customers benefit from an unmatched combination of value, quality, and exceptional service experience.

About TMUS Global Solutions:

TMUS Global Solutions is a world-class technology powerhouse accelerating the company’s global digital transformation. With a culture built on growth, inclusivity, and global collaboration, the teams here drive innovation at scale, powered by bold thinking.

TMUS India Private Limited operates as TMUS Global Solutions.

The Database Security Engineer plays a critical role in designing, implementing, administering, securing, and maintaining enterprise Cassandra and MongoDB database platforms. This role combines expert DBA capabilities with deep specialization in database security architecture, Zero Trust, privileged access management, encryption, auditing, vulnerability management, compliance, and security automation. The engineer partners closely with Cybersecurity, Infrastructure, Cloud Engineering, DevOps, and Application teams to protect enterprise data while maintaining highly available, resilient database services.

What You'll Do:

Database Engineering:

• Perform full lifecycle DBA activities including installation, configuration, patching, upgrades, backup/recovery, migrations, HA/DR, replication, performance tuning, automation, and cloud database administration.

Database Security Engineering:

• Design secure database architectures aligned with Zero Trust principles.
• Implement CIS hardening standards and database security baselines.
• Administer authentication, authorization, RBAC, least-privilege access, and privileged account governance.
• Configure Transparent Data Encryption (TDE), Active Directory integration, SSL/TLS encryption, database auditing, and encryption key lifecycle management.
• Implement and administer Database Activity Monitoring (DAM) for real-time monitoring, auditing, anomalous access detection, and Splunk Enterprise Security integration.
• Coordinate with Cybersecurity to maintain Illumio Zero Trust Micro segmentation policies protecting database workloads.
• Integrate database authentication with Microsoft Active Directory or Entra ID (Azure AD) where applicable.
• Administer privileged database credentials using CyberArk Privileged Access Management (PAM).
• Perform vulnerability remediation using findings from Tenable and enterprise vulnerability management platforms.
• Develop compliance reporting supporting PCI-DSS, SOX, HIPAA, NIST, CIS, and enterprise security standards.
• Support incident response, forensic investigations, and participate in 24x7 production operations.

What You'll Bring:

• Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, or related field.
• 5+ years of Datastax Cassandra and/or MongoDB DBA experience.
• Strong knowledge of database security controls, IAM, encryption, auditing, SIEM integration, vulnerability remediation, and cloud database security.
• Experience with automation using Python, Bash, Terraform, or Ansible.
• Experience supporting internal and external audits is preferred, including evidence collection, control walkthroughs, and remediation tracking for SOX 404 testing, PCI QSA assessments, or similar third-party reviews.
• Working knowledge of IT General Controls (ITGCs), SOX, PCI-DSS, NIST, and CIS security frameworks.
• Excellent analytical, troubleshooting, and communication skills.

Must-Have Skills:

• Database Administration (Cassandra/MongoDB)
• Database Security Administration
• Database Development
• Identity & Access Management (IAM)
• Python, Bash
• Data Modeling
• Security Compliance & Auditing

Preferred Skills:

Datastax Cassandra:

• Unified authentication, Database auditing, TDE, SSL encryption.

MongoDB Enterprise:

• MongoDB Ops Manager, MongoDB Enterprise Auditing, Fine grained access control

Enterprise Security:

• Imperva DAM, Imperva WAF, Illumio, Microsoft Entra ID, CyberArk PAM, Tenable, Splunk Enterprise Security, Microsoft Sentinel.

Cloud & Automation:

• AWS, Azure, OCI, Terraform, Ansible, Docker, Kubernetes, GitHub Actions, Jenkins, Azure DevOps.

Observability:

• Prometheus, Grafana, Splunk, OpenTelemetry, Dynatrace.

Professional Certifications:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CRISC (Certified in Risk and Information Systems Control)
• CCSP (Certified Cloud Security Professional)
• Cassandra Certified Professional
• MongoDB Database Administrator Certification
• AWS, Azure, or OCI Security certifications are a plus.

Key Responsibilities:

• Database Administration
• Database Security Engineering
• Database Hardening
• Zero Trust Security
• Vulnerability Management
• Identity & Access Management
• Privileged Access Management
• Encryption & Key Management
• Security Automation
• Audit & Compliance Reporting
• Cloud Database Security
• Security Architecture
• Operational Excellence