The posting
What Success Looks Like (Objectives):
As the Senior Identity & Access Management (IAM) Engineer at DISH, you will serve as the primary technical consultant for our IAM program. In this critical, high-impact role. You will take full ownership of Okta SSO, Non-Human Identity (NHI), and Cloud Server Access.
You will be the driving force behind modernizing our identity infrastructure—migrating legacy processes and operational scripts into seamless, frictionless Okta-based workflows. By streamlining provisioning, enforcing robust authentication mechanisms for both human and machine identities, and mitigating insider and external threats, you will play a pivotal role in safeguarding DISH’s critical systems and data.
Key Responsibilities
- Hybrid Cloud Architecture & Implementation: Architect, design, and implement enterprise-wide Okta-based IAM solutions integrating Okta with Cloud IAM Identity Center, ensuring seamless federation and granular access control, ensuring secure and efficient access for on-premise and cloud-based applications.
- Non-Human Identity (NHI) Management: Design and execute strategies for securing and managing non-human identities, including service accounts, API keys, secrets, certificates, and workload identities across enterprise and cloud (AWS/GCP) environments.
- Legacy Modernization: Lead the effort to migrate old legacy code and scripts to Okta-based workflows and connectors to improve operational efficiency, reduce administrative overhead, and enhance the user experience.
- Workflow Development: Develop sophisticated Okta Workflows to automate the complete lifecycle (JML - Joiner, Mover, Leaver) for both corporate users and Cloud-native system accounts.
- Threat Detection & Incident Response: Maintain identity management programs with a focus on threat detection. Proactively identify potential threats, exploit attempts, and security events related to Directory Services and IAM. Actively contribute to security incident response and mitigate issues appropriately.
- Access Control & Least Privilege: Manage accounts, permissions, and access controls. Collaborate across multiple departments to understand application integrations, ensure secure access protocols, and strictly enforce least privilege principles for all identities.
- Continuous Improvement: Identify, report, and execute remediation for gaps in critical security processes. Stay updated on industry trends, IAM tools, and best practices.
Core Skills, Competencies, and Key Experiences (What you’ll bring)
Required Qualifications & Skills
- IAM Expertise: Extensive hands-on knowledge of IAM concepts, architecture, and best practices, specifically surrounding SSO, identity federation, Privileged Access Management (PAM), and Machine/Non-Human Identity management.
- Okta Proficiency: Deep expertise in the Okta platform with a mandatory, proven capability in building and deploying Okta Workflows.
- Cloud & Workload Identity Experience: Practical experience securing and managing identities within cloud environments, specifically AWS or Google Cloud Platform (GCP) (e.g., AWS IAM roles, GCP Service Accounts, cross-account access, and secrets management).
- Authentication Protocols: Strong understanding of identity federation, SSO, SAML, OAuth, OIDC, MFA, and Role-Based Access Control (RBAC).
- Development & Scripting: Proficiency in modern development and scripting languages to support automation and integration, including NodeJS, ReactJS, JavaScript, HTML, REST APIs, and SQL. Familiarity with DevOps practices.
- Security Acumen: Strong background in threat detection, monitoring security incidents, and implementing risk mitigation strategies to prevent data breaches and compliance violations.
- 5 + years of Hands on experience Identity and access management projects with specific experience in Non human identities.
About our Department
Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.
About Our Company
DISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers.
Our product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over-the-top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet).
Our facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development.
EchoStar does not charge any fees to job applicants or candidates at any point during the recruitment and hiring process. We strongly advise all individuals to be vigilant and disregard any unsolicited requests for payment or personal financial information related to an EchoStar employment opportunity.
Benefits
- Insurance and Wellbeing
- Financial & Retiral Benefit Program
- Mental Wellbeing
- Employee Stock Purchase Program (ESPP)
- Professional Development Reimbursement
- Time Off
- Team Outings
We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.
EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to make echostar.com and jobs.echostar.com accessible to users. Please contact [email protected] if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.
Click the links to access the following statements: EEO Policy Statement, Pay Transparency, EEOC Know Your Rights (English/Spanish)
