{"id":3386747,"url":"https://alion.io/job/t-mobile-systems-architect-identity-access-management","title":"Systems Architect — Identity & Access Management","company":{"id":19639,"name":"T-Mobile","domain":"t-mobile.com","url":"https://alion.io/company/t-mobile-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":109,"ghost_share":0,"stale_share":0.872,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Overland Park, United States","Atlanta, United States","Frisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90850,"max":163990,"currency":"USD","period":"year","gross":null,"usd_annual":163990},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"GCP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Oracle","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Teradata","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-20T00:00:00Z","employer_posted_date":"2026-08-20","last_verified_at":"2026-11-03T04:32:08Z","board_verified":true,"closed_at":null,"days_open":75,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":75},"description":"At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!\nAre you ready for the next chapter in your Uncarrier journey?The System Architect is essential for designing and building enterprise-level identity and access management solutions that support secure access across the organization. It involves collaborating with leadership, principal architects, and development teams to align solutions with identity and security strategies. The role requires maintaining a thorough understanding of identity architecture to ensure solutions meet business and compliance requirements. Success is measured by the effectiveness of designing new solutions, driving it forward with experience at the core. The work directly impacts the organization's ability to leverage technology for secure, least-privilege access at scale.\nYou'll join Identity Experience Operations, lead and Architect our Identity Management forward.\nWe pride ourselves on encouraging a culture of innovation, advocating for agile methodologies, and promoting transparency in all that we do. Join us in embodying the spirit of the 'Un-carrier' and make a tangible impact!\nJob Responsibilities\nArchitects and builds enterprise-class identity and access management solutions to meet organizational needs\nCollaborates with leadership and technical teams to align solutions and drive new access management architecture with experience at the core.\nAnalyzes business requirements to ensure solutions effectively address organizational needs\nDesigns and governs single sign-on, federation, and identity lifecycle across hybrid environments\nDesigns entitlement and access package frameworks that enforce least privilege\nEnhances decision-making and operational efficiency through innovative technology implementations\nEvaluates emerging identity technologies and AI-driven tooling\nMaintains up-to-date knowledge of information architecture to support solution development\nEngages with stakeholders to facilitate the implementation of technological solutions\nAlso responsible for other duties/projects as assigned by business management as needed\nEducation and Work Experience\nBachelor's Degree plus 3-5 years of related work experience OR advanced degree with 2-3 year of related work experience OR combination of education and experience deemed equivalent (Required)\nAcceptable areas of study include Computer Science, Technology or related field (Preferred)\n2-4+ years of experience with enterprise level database systems such as Teradata, Oracle, SQL Server or others. (Preferred)\n2-4+ years of experience with data modeling principles in relational and dimensional database structures. (Preferred)\n2-4+ years demonstrated SQL knowledge and ability to write and understand complex SQL logic to join multiple tables from multiple sources. (Preferred)\nRequired Knowledge, Skills and Abilities\nIdentity and Access Management\nFederation Protocols - SAML 2.0, OIDC, OAuth 2.0, SCIM\nMicrosoft Entra ID (Azure AD)\nIdentity Lifecycle and Provisioning\nEntitlement and Access Design\nDirectory Services and Hybrid Identity\nSecurity Architecture and Zero Trust\nAPI and Integration Architecture\nArchitectural Modeling\nPrototyping\nSolution Architecture\nStakeholder Management\nStrategic Planning\nSystems Architecture\nTechnology Roadmap\nPreferred Knowledge, Skills and Abilities\nMulti-cloud identity across Azure, AWS, and GCP\nIdentity Governance and Administration platforms such as SailPoint\nNon-human and machine identity - service principals, managed identities\nConditional Access and Privileged Identity Management\nAI-driven identity tooling, and hands-on use of AI tools such as Claude or GitHub Copilot\nAutomation and scripting - PowerShell, Python, Microsoft Graph\nRegulated enterprise environments, and frameworks such as SOX or NIST 800-63\nCertifications such as SC-300, CISSP, or TOGAF\nAt least 18 years of age\nLegally authorized to work in the United States\nTravel:\nTravel Required (Yes/No): No\nDOT Regulated:\nDOT Regulated Position (Yes/No): No\nSafety Sensitive Position (Yes/No): No\nTotal Target Cash Earnings Opportunity: $90,850 - $163,990National Base Pay Range: $79,000 - $142,600\nThe Total Target Cash Earnings Opportunity represents the expected total cash compensation for this role at target performance, combining base salary and annual incentive opportunity. Actual earnings may be higher or lower depending on individual performance and overall company results.\nThe base pay range reflects the compensation component of this opportunity. The candidate’s actual pay will be based on various factors, such as work location, qualifications, and experience, so the actual starting pay will vary within this range. To find the pay range for this role based on hiring location, https://paylookup.t-mobile.com/paylookup?reqID=REQ366519&paradox=1At T-Mobile, employees in regular, non-temporary roles are eligible for an annual bonus or periodic sales incentive or bonus, based on their role. Corporate employees are eligible for a year-end bonus based on individual and/or company performance and which is set at a percentage of the employee’s eligible earnings in the prior year. Certain positions in Customer Care are eligible for monthly bonuses based on individual and/or team performance. The incentive component included in the Total Target Cash Earnings Opportunity reflects target performance. Actual earnings included in the Total Target Cash Earnings Opportunity reflect target performance; actual payouts may vary. \nAt T-Mobile, our benefits exemplify the spirit of One Team, Together! A big part of how we care for one another is working to ensure our benefits evolve to meet the needs of our team members. Full and part-time employees have access to the same benefits when eligible. We cover all of the bases, offering medical, dental and vision insurance, a flexible spending account, 401(k), employee stock grants, employee stock purchase plan, paid time off and up to 12 paid holidays - which total about 4 weeks for new full-time employees and about 2.5 weeks for new part-time employees annually - paid parental and family leave, family building benefits, back-up care, enhanced family support, childcare subsidy, tuition assistance, college coaching, short- and long-term disability, voluntary AD&D coverage, voluntary accident coverage, voluntary life insurance, voluntary disability insurance, and voluntary long-term care insurance. We don't stop there - eligible employees can also receive mobile service & home internet discounts, pet insurance, and access to commuter and transit programs! To learn about T-Mobile’s amazing benefits, check out www.t-mobilebenefits.com.\nNever stop growing!\nAs part of the T-Mobile team, you know the Un-carrier doesn’t have a corporate ladder-it’s more like a jungle gym of possibilities! We love helping our employees grow in their careers, because it’s that shared drive to aim high that drives our business and our culture forward. By applying for this career opportunity, you’re living our values while investing in your career growth-and we applaud it. You’re unstoppable!\nT-Mobile USA, Inc. is an Equal Opportunity Employer. All decisions concerning the employment relationship will be made without regard to age, race, ethnicity, color, religion, creed, sex, sexual orientation, gender identity or expression, genetic information, national origin, religious affiliation, marital status, citizenship status, veteran status, the presence of any physical or mental disability, or any other status or characteristic protected by federal, state, or local law. Discrimination, retaliation or harassment based upon any of these factors is wholly inconsistent with how we do business and will not be tolerated.\nTalent comes in all forms at the Un-carrier. If you are an individual with a disability and need reasonable accommodation at any point in the application or interview process, please let us know by emailing  or calling 1-844-873-9500. Please note, this contact channel is not a means to apply for or inquire about a position and we are unable to respond to non-accommodation related requests.","description_format":"text","description_chars":8541,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Mobile Networks","Broadband"],"lifecycle":[{"event":"open","at":"2026-10-28T08:00:17Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 427 · green card filings: 130","filings_12m":427,"filings_prev_12m":487,"green_card_filings_12m":130,"median_offered_wage_usd":148667,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":49}],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.47,"p_room":0.28,"age_days":74,"expected_fill_days":25,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":163990,"is_top_pay":false},"html_url":"https://alion.io/job/t-mobile-systems-architect-identity-access-management","json_url":"https://alion.io/job/t-mobile-systems-architect-identity-access-management.json","meta":{"generated_at":"2026-11-03T05:50:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7926,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19639},"rest":"https://alion.io/mcp/rest/get_company?id=19639"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ft-mobile-systems-architect-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ft-mobile-systems-architect-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ft-mobile-systems-architect-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/t-mobile-systems-architect-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ft-mobile-systems-architect-identity-access-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3386747}},{"tool":"search_jobs","arguments":{"company":"t-mobile.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3386747},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}