Security Solutions Architect

Dish Network Corporation; Littleton (CO); On-site; USD 127,050 - 181,500; Full time

Benefits offered by this job

Health perks

HSA

401(k) plan

ESPP

Flexible time away

Job summary

EchoStar is seeking a security architect to design and deploy a scalable IAM framework across internal staff and external vendors, while implementing a Zero Trust Architecture and data-driven security metrics. You will integrate AI-driven threat detection and lead security requirements for new enterprise initiatives.

The role emphasizes cross-functional collaboration with IT, compliance, and business units to ensure scalable defenses and reduced authentication friction in a dynamic enterprise

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related discipline or commensurate experience.
• Extensive experience in cybersecurity principles, concepts, and technologies.
• Experience with IAM frameworks, Zero Trust, CTI frameworks, and testing tools.

Responsibilities

• Design and deploy a scalable IAM framework with MFA and access controls for employees and vendors.
• Implement Zero Trust Architecture with segmentation to restrict lateral movement.
• Establish data-driven metrics to measure production security controls.
• Integrate AI-driven threat detection and automation into the security stack.
• Lead security intake processes for new initiatives and ensure control integration.

Skills

IAM architecture

Zero Trust design

CTI frameworks

Vulnerability assessment

AI-driven security

Cross-functional leadership

Education

Bachelor's degree in CS/IT or related field

Tools

Vulnerability scanning tools

Penetration testing tools

AI security tools

Job description

Job Duties and Responsibilities

Candidates must be willing to participate in at least one in-person interview, which may include a live whiteboarding or technical assessment session.

EchoStar requires robust security across its digital ecosystem to mitigate risks associated with unauthorized access, supply chain exposure, and identity exploitation. This role addresses these vulnerabilities by establishing a secure Identity and Access Management (IAM) framework and deploying a Zero Trust Architecture across corporate and vendor environments. Key challenges include eliminating authentication friction, controlling lateral movement within networks, and continuously measuring security control effectiveness against evolving threat vectors. The role ensures alignment across IT, compliance, and business units while implementing scalable cybersecurity defenses.

What Success Looks Like

• Design and deploy a scalable IAM framework that standardizes multi-factor authentication and access controls for all internal employees and external supply chain vendors
• Implement a Zero Trust Architecture utilizing user‑ and network‑based segmentation to restrict unauthorized lateral movement across corporate networks
• Establish data‑driven metrics to evaluate the operational effectiveness of production security controls and proactively remediate identified deficiencies
• Integrate AI‑driven threat detection tools and automation into the existing control stack to enhance overall security posture and incident response capabilities
• Lead security intake processes for new enterprise initiatives, defining technical security requirements and ensuring control integration into new deployments

Core Skills and Competencies

• Demonstrated expertise in enterprise IAM architecture and Zero Trust design principles, including user‑ and network‑level segmentation controls
• Proven ability to analyze Cyber Threat Intelligence (CTI) frameworks to update security architectures against emerging vulnerabilities
• Advanced proficiency with vulnerability assessment tools, penetration testing methodologies, and automated control verification platforms
• Practical application of AI literacy and AI‑driven security operations to automate threat research and technical risk identification
• Critical problem‑solving abilities and cross‑functional leadership skills to align complex technical requirements with corporate business objectives

Additional Qualifications

• Exposure to threat modeling, secure architecture design, or enterprise security audits within large‑scale network infrastructure environments

Minimum Requirements

Minimum Education: Bachelor’s Degree in Computer Science, Information Technology, related discipline, or commensurate industry experience

Minimum Experience: Critical experience demonstrating comprehensive understanding of cybersecurity principles, concepts, and technologies

Required Technical Skills: Must have experience with:

• Identity and Access Management (IAM) frameworks
• Zero Trust Architecture and network segmentation controls
• Cyber Threat Intelligence (CTI) frameworks
• Vulnerability assessment and penetration testing tools

Visa sponsorship not available for this role

Salary Ranges

Compensation: $127,050.00/Year - $181,500.00/Year

Benefits

We offer versatile health perks, including flexible spending accounts, HSA, a 401(k) Plan with company match, ESPP, career opportunities, and a flexible time‑away plan; all benefits can be viewed here.

The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies; compensation is based on the role's location and is subject to change based on work location.

Candidates need to successfully complete a pre‑employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws.

Equal Employment Opportunity Statement

We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.

EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to make echo star and jobs.echostar.com accessible to users. Please contact [e-mail] if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.