Senior Data Engineer role for Data Org, Semantic Layer

Design and develop the enterprise Semantic Layer in Microsoft Fabric, including data models, calculated metrics, hierarchies, and relationships that serve as the single source of truth for reporting and analytics. Structure semantic models to enforce Row-Level Security (RLS) and Object-Level Security (OLS) aligned with access control policies and least-privilege principles. Build and maintain reusable, versioned metric definitions using DAX and Fabric-native capabilities to ensure consistency across business domains. Optimize query performance of semantic models for large-scale datasets, including Netezza source systems. Develop and maintain data pipelines that feed the semantic layer, ensuring lineage, freshness, and accuracy of data. SOX Compliance & Financial Data Governance Architect semantic layer models to support SOX (Sarbanes-Oxley Act) compliance, including clear segregation of duties, audit trail capabilities, and controls over financially significant data. Design access control structures that enforce SOX-mandated user access reviews, ensuring only authorized personnel can view or modify financial data within the semantic layer. Implement and maintain data lineage tracking from source systems through to semantic layer metrics to support SOX audit evidence requirements. Collaborate with Internal Audit and Finance teams to document data controls, support control testing, and respond to audit requests related to data systems. Ensure all changes to financially significant models and metrics follow a change management process with appropriate approvals and documentation. Support periodic user access reviews and produce reports to satisfy SOX IT General Controls (ITGC) requirements. USGCI Handling within the Semantic Layer Engineer data segmentation and access isolation strategies to ensure US Government Customer Information (USGCI) within the semantic layer is handled in strict compliance with T-Mobile’s National Security Agreement (NSA) obligations. Design and implement semantic layer access tiers that prevent USGCI data from being surfaced to unauthorized users, offshore teams, or non-approved environments. Work with the Network Compliance Office (NCO) and data owners to define and enforce USGCI data classification tagging within Fabric data assets. Ensure USGCI data elements (including customer/agency identifiers, network access identifiers, circuit physical addresses, and contract types) are masked, restricted, or excluded from general-purpose semantic models. Maintain documentation of USGCI data flows through the semantic layer to support NSA compliance audits and reporting. Proactively identify and escalate any semantic layer configurations, pipelines, or reports that may inadvertently expose USGCI data. Data Engineering & Pipeline Development Develop data engineering solutions that enable data pipelines, visualization, and analytical tools to support business requirements. Design and develop data architectures across on-premise, cloud, and hybrid platforms (AWS, Azure, Google Cloud, Microsoft Fabric) to ensure scalable data infrastructure. Perform data wrangling, exploration, and discovery of heterogeneous data sources including Oracle, SQL Server, and Netezza, to generate new business insights. Build and optimize complex data pipelines using Python, SQL, DAX, Java, Scala, and/or Go. Design and develop solutions using SQL, NoSQL, and relational database patterns; migrate data to cloud platforms as needed. IT Security & Infrastructure Apply in-depth IT security best practices in large-scale enterprise environments, including encryption at rest and in transit, tokenization, and secure API design. Apply high-level design architecture knowledge across security technologies, networking, web services, and Service-Oriented Architecture (SOA) to ensure data solutions are resilient and secure. Design and review infrastructure and application components across OS environments (Unix, Windows, Linux) and RDBMS platforms (Oracle, SQL Server, Netezza) with security as a first principle. Partner with Cybersecurity and Infrastructure teams to ensure semantic layer components meet T-Mobile security standards and pass security architecture reviews. Identify and remediate security gaps in data pipelines, access models, and API integrations. Team Leadership & Enablement Contribute to team knowledge sharing and drive the advancement of new data engineering capabilities. Mentor team members to build and enhance their data engineering skills, with a focus on governance, compliance, and secure data practices. Assist management in project definition, including estimating, planning, and scoping work to meet objectives. Also responsible for other duties and projects as assigned by business management. Approximate Time Allocation Responsibility Area % of Time Semantic layer engineering & model development (Fabric) 25% SOX compliance, governance & audit support 15% USGCI handling, segmentation & NSA compliance 10% Data pipelines, wrangling & cloud architecture 20% IT security design & infrastructure 10% Team mentoring, knowledge sharing & project planning 20%, Role: Senior Data Engineer- US Citizen Location: Minneapolis, MN Rate: Depends on experience Additional Requirements Must be a U.S. Citizen * Must be currently located in Min…

4-7 yrs Developing cloud solutions using data services; hands-on with AWS, Azure, Microsoft Fabric, or Google Cloud 4-7 yrs Hands-on development and migration of data to cloud platforms X 4-7 yrs SQL, NoSQL, and relational database design; experience with Oracle, SQL Server, Netezza 4-7 yrs Building complex data pipelines using Python, SQL, DAX, Java, Scala, and/or Go 3-5 yrs Designing and building semantic models or data warehouses for enterprise-scale analytics 3-5 yrs Implementing data governance frameworks including data lineage, cataloging, and access control in a regulated environment 3-5 yrs SOX compliance activities: IT General Controls (ITGC), audit support, segregation of duties, and change management for data systems 2-4 yrs IT security best practices in large-scale environments: encryption, tokenization, secure API design, least-privilege access, and security architecture review 2-4 yrs Infrastructure and application design across OS environments (Unix, Windows, Linux) and RDBMS platforms 2-4 yrs High-level design architecture across security technologies, networking, web services, and SOA in enterprise environments 2-4 yrs USGCI data handling, NSA/CFIUS compliance, or equivalent regulated government data programs Any Microsoft Fabric (Lakehouse, Warehouse, Dataflows, DirectLake), Power BI, and Microsoft Purview Preferred Certifications & Additional Skills Microsoft Certified: Azure Data Engineer Associate (DP-203) or equivalent cloud data certification. Experience designing Row-Level Security (RLS) and Object-Level Security (OLS) in Power BI or Analysis Services semantic models. Familiarity with data classification and tagging frameworks in regulated industries. Knowledge of CPNI (Customer Proprietary Network Information) handling requirements in addition to USGCI. Experience working directly with Internal Audit, external auditors, or compliance teams on data control