Identity Systems Engineer II

Company Summary
EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products.
Today, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV.
Department Summary
Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our team members play a vital role in connecting consumers with the products and platforms of tomorrow.
Job Duties and Responsibilities
Candidates must be willing to participate in at least one in-person interview, which may include a live whiteboarding or technical assessment session.
The IAM Engineer II - Information Security Architect will work closely with architecture, engineering, and development teams across Information Technology and Cybersecurity to enhance identity security, access governance, and authentication frameworks. This role will focus on data-driven decision-making, optimizing identity security controls, and ensuring compliance with regulatory and security frameworks.
Key Responsibilities:

• Identity & Access Management (IAM) Security
• Automate identity lifecycle processes (provisioning, deprovisioning, and access reviews) using Okta, Active Directory, and ADFS
• Analyze IAM security reports to identify access anomalies, risks, and optimization opportunities
• Implement role-based access control (RBAC), privileged access management (PAM), and multi-factor authentication (MFA) strategies
• Security Analytics & Reporting
• Review, analyze, and interpret IAM security logs, SIEM reports, and threat intelligence data
• Identify trends, anomalies, and actionable insights to enhance security monitoring and incident response
• Develop and improve data-driven security dashboards and reports to provide visibility into access risks and compliance gaps

Skills, Experience and Requirements
Education and Experience:

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent industry experience
• 2+ years of relevant experience
• Experience with ADFS required

Skills and Qualifications:

• Hands-on experience with Okta, Active Directory, ADFS, and cloud-based IAM solutions (AWS IAM, Azure AD)
• Strong understanding of IAM security frameworks, identity governance, and authentication mechanisms
• Knowledge of security technologies such as SIEM, firewalls, IDS/IPS, encryption, and authentication protocols
• Experience with identity threat detection, IAM security analytics, and vulnerability management
• Strong analytical and problem-solving skills, with the ability to interpret complex security data and drive actionable insights
• Excellent communication and collaboration skills, with the ability to work across technical and business teams
• Relevant certifications such as CISSP, CISM, CompTIA Security+, or Okta Certified Professional are a plus

Salary Ranges
Compensation: $72,400.00/Year - $118,900.00/Year
Benefits
We offer versatile health perks, including flexible spending accounts, HSA, a 401(k) Plan with company match, ESPP, career opportunities, and a flexible time away plan; all benefits can be viewed here: DISH Benefits .
The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies; compensation is based on the role's location and is subject to change based on work location.
Candidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws.
The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.