Systems Architect — Identity & Access Management

At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!

Are you ready for the next chapter in your Uncarrier journey?

The System Architect is essential for designing and building enterprise-level identity and access management solutions that support secure access across the organization. It involves collaborating with leadership, principal architects, and development teams to align solutions with identity and security strategies. The role requires maintaining a thorough understanding of identity architecture to ensure solutions meet business and compliance requirements. Success is measured by the effectiveness of designing new solutions, driving it forward with experience at the core.

The work directly impacts the organization’s ability to leverage technology for secure, least-privilege access at scale.

You’ll join Identity Experience Operations, lead and Architect our Identity Management forward.

We pride ourselves on encouraging a culture of innovation, advocating for agile methodologies, and promoting transparency in all that we do. Join us in embodying the spirit of the ‘Un-carrier’ and make a tangible impact!

• Architects and builds enterprise-class identity and access management solutions to meet organizational needs
• Collaborates with leadership and technical teams to align solutions and drive new access management architecture with experience at the core.
• Analyzes business requirements to ensure solutions effectively address organizational needs
• Designs and governs single sign-on, federation, and identity lifecycle across hybrid environments
• Designs entitlement and access package frameworks that enforce least privilege
• Enhances decision-making and operational efficiency through innovative technology implementations
• Evaluates emerging identity technologies and AI-driven tooling
• Maintains up-to-date knowledge of information architecture to support solution development
• Engages with stakeholders to facilitate the implementation of technological solutions
• Also responsible for other duties/projects as assigned by business management as needed

• Bachelor's Degree plus 3-5 years of related work experience OR advanced degree with 2-3 year of related work experience OR combination of education and experience deemed equivalent (Required)
• Acceptable areas of study include Computer Science, Technology or related field (Preferred)
• 2-4+ years of experience with enterprise level database systems such as Teradata, Oracle, SQL Server or others. (Preferred)
• 2-4+ years of experience with data modeling principles in relational and dimensional database structures. (Preferred)
• 2-4+ years demonstrated SQL knowledge and ability to write and understand complex SQL logic to join multiple tables from multiple sources. (Preferred)

• Identity and Access Management
• Federation Protocols — SAML 2.0, OIDC, OAuth 2.0, SCIM
• Microsoft Entra  (Azure AD)
• Identity Lifecycle and Provisioning
• Entitlement and Access Design
• Directory Services and Hybrid Identity
• Security Architecture and Zero Trust
• API and Integration Architecture
• Architectural Modeling
• Prototyping
• Solution Architecture
• Stakeholder Management
• Strategic Planning
• Systems Architecture
• Technology Roadmap

• Multi-cloud identity across Azure, AWS, and GCP
• Identity Governance and Administration platforms such as Sail Point
• Non-human and machine identity — service principals, managed identities
• Conditional Access and Privileged Identity Management
• AI-driven identity tooling, and hands-on use of AI tools such as Claude or Git Hub Copilot
• Automation and scripting — Power Shell, Python, Microsoft Graph
• Regulated enterprise environments, and frameworks such as SOX or NIST 800-63
• Certifications such as SC-300,…