Security Solutions Architect

Company Summary

EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products.Today, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV.

Department Summary

Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our team members play a vital role in connecting consumers with the products and platforms of tomorrow.

Job Duties and Responsibilities

Candidates must be willing to participate in at least one in-person interview, which may include a live whiteboarding or technical assessment session.

EchoStar requires robust security across its digital ecosystem to mitigate risks associated with unauthorized access, supply chain exposure, and identity exploitation. This role addresses these vulnerabilities by establishing a secure Identity and Access Management (IAM) framework and deploying a Zero Trust Architecture across corporate and vendor environments. Key challenges include eliminating authentication friction, controlling lateral movement within networks, and continuously measuring security control effectiveness against evolving threat vectors. The role ensures alignment across IT, compliance, and business units while implementing scalable cybersecurity defenses.

What Success Looks Like

• Design and deploy a scalable IAM framework that standardizes multi-factor authentication and access controls for all internal employees and external supply chain vendors

• Implement a Zero Trust Architecture utilizing user- and network-based segmentation to restrict unauthorized lateral movement across corporate networks

• Establish data-driven metrics to evaluate the operational effectiveness of production security controls and proactively remediate identified deficiencies

• Integrate AI-driven threat detection tools and automation into the existing control stack to enhance overall security posture and incident response capabilities

• Lead security intake processes for new enterprise initiatives, defining technical security requirements and ensuring control integration into new deployments

Skills, Experience and Requirements

Core Skills and Competencies

• Demonstrated expertise in enterprise IAM architecture and Zero Trust design principles, including user- and network-level segmentation controls

• Proven ability to analyze Cyber Threat Intelligence (CTI) frameworks to update security architectures against emerging vulnerabilities

• Advanced proficiency with vulnerability assessment tools, penetration testing methodologies, and automated control verification platforms

• Practical application of AI literacy and AI-driven security operations to automate threat research and technical risk identification

• Critical problem-solving abilities and cross-functional leadership skills to align complex technical requirements with corporate business objectives

Additional Qualifications

• Exposure to threat modeling, secure architecture design, or enterprise security audits within large-scale network infrastructure environments

Minimum Requirements

Minimum Education: Bachelor’s Degree in Computer Science, Information Technology, related discipline, or commensurate industry experience

Minimum Experience: Critical experience demonstrating comprehensive understanding of cybersecurity principles, concepts, and technologies

Required Technical Skills: Must have experience with:

• Identity and Access Management (IAM) frameworks

• Zero Trust Architecture and network segmentation controls

• Cyber Threat Intelligence (CTI) frameworks

• Vulnerability assessment and penetration testing tools

Visa sponsorship not available for this role

Salary RangesCompensation: $127,050.00/Year - $181,500.00/Year Benefits

We offer versatile health perks, including flexible spending accounts, HSA, a 401(k) Plan with company match, ESPP, career opportunities, and a flexible time away plan; all benefits can be viewed here: .

The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies; compensation is based on the role's location and is subject to change based on work location.

Candidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws.

The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.