Cheyenne Bounds

Cybersecurity Engineer, ZTNA

T-Mobile · Seattle, WA

Develop, implement, and maintain secure network infrastructure solutions using Zero Trust Network Access (ZTNA) and Virtual Private Network (VPN) technologies. Assess existing network security architectures and document findings and recommendations aligned with industry best practices. Monitor network security protocols and best practices related to ZTNA and provide guidance on improvements or updates. Respond to and manage cyber security incidents. Act as a leader and mentor to junior technical personnel. Collaborate with internal teams to develop and improve processes related to network security. Analyze data and trends to understand network security threats and vulnerabilities. Create and maintain technical documentation related to network security. Research and recommend new products and technologies to improve network security. Perform hands-on implementations and configurations of network security technologies. Ensure all security operations and maintenance activities are fully documented and up to date.

• Integrated AI / LLM tooling into Tier 1 to 3 incident and service-task triage by building a custom knowledge MCP server (~19,000 indexed documentation chunks) and a suite of triage skills encoding team decision trees — covering internet-access allow requests, private-access connectivity incidents, and endpoint-client log analysis.
• Supported identity- and policy-based access control using Zscaler ZIA/ZPA, integrating SCIM provisioning and Microsoft Entra ID to enforce Zero Trust access across legacy and data center environments.
• Improved access visibility and reduced misconfigurations across enterprise infrastructure by aligning identity-based controls with existing network architectures
• Automated 42% of previously manual security and access management tasks, increasing operational efficiency.
• Built a DLP rule-builder CLI that detects sensitive (CPNI) data in carrier bills and proposes validated DLP dictionary/engine/policy configurations.
• Analyzed ~15,500 incidents and service tasks over two years to surface recurring patterns and prioritize automation opportunities.
• Participated in control effectiveness testing and remediation resulting in 100% compliance with SOX, PCI, and CPNI requirements.
• Developed standardized documentation and repeatable evidence templates to improve audit readiness and support ongoing compliance cycles.

Engineer, Systems Architecture

T-Mobile · Seattle, WA

Oversaw total life cycle focus for the program from requirements development and architecture creation with a focus on complex system designs through architect definition. Partnered closely with internal teams, SMEs, program management, and Systems Engineering leadership to drive the technical solution across the program. Ensure the requirements and architecture focused on “building the right thing.” Developed architectures, defining the physical architecture, allocating requirements to architecture elements, deriving requirements to drive details into the model, creating and refining modeling standards and design patterns, and distributing and merging model elements back into the baseline

• Designed and deployed hybrid-cloud infrastructure aligned with Zero Trust and OnPrem Cloud principles.
• Applied security hardening techniques to reduce attack surface and improve system resilience.
• Led capacity planning initiatives to support traffic growth without degrading network performance.
• Automated network operations, improving response times by 20% and reducing manual intervention.
• Developed and enforced policies to ensure high availability and compliance with SOX, PCI, and CPNI regulations.
• Mentored junior and senior engineers in troubleshooting techniques, infrastructure practices, and security-minded design decisions.
• Collaborated with engineering and security teams to deliver secure, business-aligned network solutions.

Associate Engineer, Systems Architecture

T-Mobile · Seattle, WA

Designed and developed system architectures, and defined key capabilities and performance requirements. Defined total systems design and technology maturity constraints in accordance with mission requirements. Developed system element architecture and design and interface definitions. Defined system implementation approach and operational concept. Developed models and architectural guidelines for current and future system development.

• Led firewall and perimeter security operations, supporting high-priority applications and audits for SOX and PCI compliance.
• Cut firewall rule turnaround times by 25% by removing steps from the approval and validation workflow.
• Facilitated application migrations (PCF and TKE) while ensuring policy integrity and secure access during transition.
• Delivered technical documentation and collaborated with security, payment, and ops teams for infrastructure aligned change control.
• Managed escalations and high-pressure project requests with efficiency and consistent delivery under tight deadlines
• Identified operational risks and implemented proactive measures to strengthen compliance readiness.
• Simplified workflows and advocated for tool improvements to reduce friction and improve system performance.

Launch Engineer Intern

Firefly Aerospace

Co-designed and built the hardware and software for a launch-pad state warning system meeting U.S. Space Systems Command range-safety standards (SSCMAN 91-710). Programmed safe/nominal/hazardous state-change logic in Lua to drive warning lights and audio, installed and tuned a siren and speaker array, and validated alert coverage with decibel-meter testing during launch preparation.

Technical Support Specialist

Wave Broadband

Delivered remote technical troubleshooting for broadband, TV, and voice services. Reduced service disruptions by 20% through accurate diagnostics and secure data handling.