Security Solutions Architect

EchoStar Corporation; Littleton (CO); On-site; USD 127,000 - 182,000; Full time

Job summary

EchoStar Corporation is seeking a security-focused professional to architect and deploy an IAM program and Zero Trust framework across corporate and vendor environments. The role emphasizes reducing authentication friction, preventing lateral movement, and measuring security controls against evolving threats.

You will drive alignment across IT, compliance, and business units while integrating AI-driven threat detection and automation into the identity stack to enhance incident response

Qualifications

• Experience implementing IAM architectures and privileged access controls.
• Experience with Zero Trust architectures and network segmentation.
• Familiarity with Cyber Threat Intelligence (CTI) frameworks.
• Proficiency with vulnerability assessment and penetration testing tooling.
• Exposure to threat modeling or security audits in large-scale networks.

Responsibilities

• Design and deploy a scalable IAM framework with MFA, SSO, and privileged access controls for employees and vendors.
• Implement Zero Trust Architecture with identity-driven segmentation to limit lateral movement across networks.
• Establish data-driven metrics to evaluate IAM control effectiveness and remediate deficiencies.
• Integrate AI-driven threat detection and automation into IAM/security stack for risk detection and incident response.
• Lead security intake for new enterprise initiatives, defining IAM/security requirements for deployments.

Skills

Enterprise IAM architecture

Zero Trust design

Cyber Threat Intelligence (CTI)

Vulnerability assessment tooling

Penetration testing methodologies

AI-driven security operations

Education

Bachelor’s degree in Computer Science/IT or related field

Tools

Vulnerability assessment tools

Penetration testing tools

Job description

EchoStar requires robust security across its digital ecosystem to mitigate risks associated with unauthorized access, supply chain exposure, and identity exploitation. This role addresses these vulnerabilities by establishing a secure Identity and Access Management (IAM) framework and deploying a Zero Trust Architecture across corporate and vendor environments. Key challenges include eliminating authentication friction, controlling lateral movement within networks, and continuously measuring security control effectiveness against evolving threat vectors. The role ensures alignment across IT, compliance, and business units while implementing scalable cybersecurity defenses.

What Success Looks Like (Objectives):

• Design and deploy a scalable IAM framework that standardizes multi-factor authentication, single sign-on, and privileged access controls for internal employees and external supply chain vendors to meet security OKRs
• Implement a Zero Trust Architecture utilizing identity-driven user and network segmentation to restrict unauthorized lateral movement across corporate networks
• Establish data-driven metrics to evaluate the operational effectiveness of production IAM controls and proactively remediate identified deficiencies
• Integrate AI-driven threat detection tools and automation into the identity and access control stack to enhance behavioral anomaly detection and incident response capabilities
• Lead security intake processes for new enterprise initiatives, defining technical IAM and security architecture requirements to ensure seamless control integration into new deployments

Core Skills, Competencies, and Key Experiences (What you’ll bring)

• Strong skills in enterprise IAM architecture, privileged access management, and Zero Trust design principles, including user- and network-level segmentation controls
• Ability to analyze Cyber Threat Intelligence (CTI) frameworks to anticipate identity-based attack vectors and proactively update security architectures against emerging vulnerabilities
• Problem solving in utilizing vulnerability assessment tools, penetration testing methodologies, and automated control verification platforms to remediate access vulnerabilities
• AI Application in leveraging AI-driven security operations and tooling to automate identity threat research and technical risk identification
• Decision making and cross-functional leadership to align complex IAM and cybersecurity engineering requirements with corporate business objectives

Additional Qualifications:

• Exposure to threat modeling, secure architecture design, or enterprise security audits within large-scale network infrastructure environments

Candidates must be willing to participate in at least one in-person interview.

Visa sponsorship not available for this role.

Minimum Requirements

• Minimum Education: Bachelor’s Degree in Computer Science, Information Technology, related discipline, or commensurate industry experience
• Minimum Experience: Critical experience demonstrating comprehensive understanding of cybersecurity principles, concepts, and technologies
• Required Technical Skills: Must have experience with:

• Identity and Access Management (IAM) frameworks
• Zero Trust Architecture and network segmentation controls
• Cyber Threat Intelligence (CTI) frameworks
• Vulnerability assessment and penetration testing tools

Salary Range

Compensation: $127,050.00/Year - $181,500.00/Year

About Our Department

Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our team members play a vital role in connecting consumers with the products and platforms of tomorrow.

About Our Company

EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products. Today, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV.

Benefits

We offer meaningful health perks, including flexible spending accounts, HSA, a 401(k) plan with company match, employee stock purchase plan, career opportunities, and a flexible time away plan. Review a benefits summary here: EchoStar Benefits The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies. Compensation is based on the role's location and is subject to change.

Candidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check.

Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed.

We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws.

This job posting will be active for a minimum of 3 days and will continue to extend by 3 days until the position is filled.

We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law.

All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law.

You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.

EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law.

EchoStar has a more detailed Accommodation Policy that applies to employees.

EchoStar endeavors to make

echostar.com and jobs.echostar.com

Please contact [e-mail] if you would like to discuss the accessibility of our website or need assistance completing the application process.

This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.

If you have questions regarding your application or the recruitment process please email [e-mail].

Click the links to access the following statements: EEO Policy Statement, Pay Transparency, EEOC Know Your Rights (English/Spanish).