> Markdown version of [/jobs/ext/2569536-systems-design-engineer](https://www.wearedevelopers.com/jobs/ext/2569536-systems-design-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Design Engineer - **Company:** T-Mobile Us, Inc. - **Location:** United States - **Experience:** Expert - **Salary:** $113,045.0 - $203,895.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Confluence, JIRA, Microsoft Azure, Border Gateway Protocol, Cisco Hardwares, Cloud Computing, Computer Engineering, Domain Name System (DNS), IPv6, IP Address Management, Subnetting, Virtual Private Networks (VPN), Python (Programming Language), Network Architecture, Network Connections, Routing, Network Switches, Network Routers, Cloud-native Network Functions (CNF), Scripting, Google Cloud, Cloud Platform System, Boto3, Multi-Cloud, HybridCloud, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Juniper, Information Technology, Route53, Terraform, Open Network Automation Platform - **Published:** August 28, 2026 - **Apply:** https://www.dice.com/job-detail/22df3ec3-3329-4abf-8712-c8c1bfe8dbff ## About the Role * Bachelor's Degree plus 5 years of related work experience OR Advanced degree with 3 years of related experience (Required) * Acceptable areas of study include Computer Science, Computer Engineering, Network Engineering, or related field (Required) * 5+ years of hands-on cloud network engineering experience; specialization in cloud networking required - cloud platform generalist or NOC/support-only backgrounds do not meet the bar (Required) * 3+ years of cloud networking experience with AWS or Azure as the primary networking platform (Required) Required Knowledge, Skills and Abilities: * Hub-Spoke Cloud Network Architecture (AWS Transit Gateway, Azure Virtual WAN, or Google Cloud Platform Network Connectivity Center) * BGP Routing and Path Manipulation (AS path prepending, local preference, MED, community strings) * Hybrid DC Interconnect Design and Operations (AWS Direct Connect or Azure ExpressRoute) * Hybrid DNS Architecture (Route 53 or Azure DNS Private Resolver, conditional forwarding, private hosted zones, split-horizon DNS) * Infrastructure-as-Code using Terraform (state management, remote backends, module authoring, peer-reviewed change processes) * Network Automation Scripting in Python (Boto3, Azure SDK, or equivalent; cross-account operational tasks) * Cloud Network Security (Security Groups, NACLs, AWS Network Firewall or Azure Firewall policy design; stateful vs. stateless inspection) * Multi-Account / Multi-Subscription Network Governance (shared VPCs, subnet delegation, route propagation across account boundaries) * SRE and On-Call Ownership for production cloud network functions * Technical Writing and Async Collaboration (Confluence/Jira, design documentation, structured async communication across distributed teams) Preferred Knowledge, Skills and Abilities: * Experience with both AWS and Azure as primary networking platforms * Google Cloud Platform networking (Cloud Router, HA VPN, Dedicated/Partner Interconnect) * IP Address Management (IPAM) tools: Infoblox, NetBox, AWS VPC IPAM, or Azure IPAM * IPv6 dual-stack design in cloud environments (addressing, routing, dual-stack coexistence with on-premises connectivity) * Device-level BGP experience on Juniper or Cisco hardware * Certifications: AWS Advanced Networking Specialty, Azure Network Engineer Associate (AZ-700), CCNP, or JNCIP * At least 18 years of age * Legally authorized to work in the United States ## Description This Sr. Systems Design Engineer (Cloud Network) designs, implements, and operates hybrid cloud network infrastructure connecting T-Mobile's multi-cloud environment to on-premises datacenters. Core specializations include hub-spoke network architecture, DC interconnect design (AWS Direct Connect / Azure ExpressRoute/Google Cloud Platform Interconnect), BGP routing policy, hybrid DNS architecture, and network automation via Terraform and Python. The role owns reliability and SRE accountability for cloud network functions - including on-call - and drives automation to eliminate manual operational toil. Success is measured by the reliability, performance, efficiency, and timely delivery of cloud network solutions. The work directly impacts organizational operations and customer experience by ensuring robust, scalable, and secure hybrid network infrastructure., * Design and implement hub-spoke cloud network topologies across AWS, Google Cloud Platform and Azure, including Transit Gateway, Cloud router, Virtual WAN, and shared VPC/subnet architectures * Own hybrid DC interconnect - design, deploy, and operate AWS Direct Connect, Google Cloud Platform interconnect and Azure ExpressRoute circuits in active-active and active-passive configurations * Configure and troubleshoot BGP routing policies (AS path prepending, local preference, MED, community strings) across cloud-to-datacenter interconnects * Design and maintain hybrid DNS architecture using Route 53 Private Resolver, Azure DNS Private Resolver, Google Cloud Platform DNS zones, conditional forwarding, and split-horizon DNS * Configure and manage Azure, AWS and Google Cloud Platform firewalls and troubleshoot and fix the issues. * Author and maintain Terraform modules for network infrastructure; enforce IaC state management, remote backends, and peer-reviewed change processes * Automate network operational tasks using Python and Boto3/Azure SDK (cross-account security group audits, routing validation, connectivity checks) * Own SRE and on-call responsibilities for cloud network functions; drive post-incident root cause analysis and eliminate recurring manual remediations * Collaborate asynchronously with distributed teams (US principal engineers, India peers, datacenter network teams) using documented designs, Confluence/Jira, and structured async handoffs * Supervise and mentor associate engineers; contribute to runbook development and knowledge documentation * Also responsible for other duties/projects as assigned by business management as needed ## Related Videos - [IoT: The road to sustainability](https://www.wearedevelopers.com/videos/557-iot-the-road-to-sustainability) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Unlocking the potential of Digital & IT at Vodafone](https://www.wearedevelopers.com/videos/602-unlocking-the-potential-of-digital-it-at-vodafone) - [Integrate your Cognitive Assistant with 3rd-party DBs and software](https://www.wearedevelopers.com/videos/249-integrate-your-cognitive-assistant-with-3rd-party-dbs-and-software) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)