Senior Engineer - Identity and Access Management

Job description

Company Summary DISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers. Our product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over-the-top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet).

Our facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development. EchoStar does not charge any fees to job applicants or candidates at any point during the recruitment and hiring process. We strongly advise all individuals to be vigilant and disregard any unsolicited requests for payment or personal financial information related to an EchoStar employment opportunity.

Department Summary Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.

Job Duties and Responsibilities

As the Senior Identity & Access Management (IAM) Engineer at DISH, you will serve as the primary technical consultant for our IAM program. In this critical, high-impact role. You will take full ownership of Okta SSO , Non-Human Identity (NHI) , and Cloud Server Access . You will be the driving force behind modernizing our identity infrastructure—migrating legacy processes and operational scripts into seamless, frictionless Okta-based workflows.

By streamlining provisioning, enforcing robust authentication mechanisms for both human and machine identities, and mitigating insider and external threats, you will play a pivotal role in safeguarding DISH’s critical systems and data.

Key Responsibilities

Hybrid Cloud Architecture & Implementation: Architect, design, and implement enterprise-wide Okta-based IAM solutions integrating Okta with Cloud IAM Identity Center, ensuring seamless federation and granular access control, ensuring secure and efficient access for on-premise and cloud-based applications.

Non-Human Identity (NHI) Management

Design and execute strategies for securing and managing non-human identities, including service accounts, API keys, secrets, certificates, and workload identities across enterprise and cloud (AWS/GCP) environments.

Legacy Modernization

Lead the effort to migrate old legacy code and scripts to Okta-based workflows and connectors to improve operational efficiency, reduce administrative overhead, and enhance the user experience.

Workflow Development

Develop sophisticated Okta Workflows to automate the complete lifecycle (JML - Joiner, Mover, Leaver) for both corporate users and Cloud-native system accounts.

Threat Detection & Incident Response

Maintain identity management programs with a focus on threat detection. Proactively identify potential threats, exploit attempts, and security events related to Directory Services and IAM. Actively contribute to security incident response and mitigate issues appropriately.

Access Control & Least Privilege

Manage accounts, permissions, and access controls. Collaborate across multiple departments to understand application integrations, ensure secure access protocols, and strictly enforce least privilege principles for all identities.

Continuous Improvement

Identify, report, and execute remediation for gaps in critical security processes. Stay updated on industry trends, IAM tools, and best practices. Skills, Experience and Requirements

Required Qualifications & Skills

IAM Expertise: Extensive hands-on knowledge of IAM concepts, architecture, and best practices, specifically surrounding SSO, identity federation, Privileged Access Management (PAM), and Machine/Non-Human Identity management.

Okta Proficiency

Deep expertise in the Okta platform with a mandatory, proven capability in building and deploying Okta Workflows.

Cloud & Workload Identity Experience

Practical experience securing and managing identities within cloud environments, specifically AWS or Google Cloud Platform (GCP) (e.g., AWS IAM roles, GCP Service Accounts, cross-account access, and secrets management).

Authentication Protocols

Strong understanding of identity federation, SSO, SAML, OAuth, OIDC, MFA, and Role-Based Access Control (RBAC).

Development & Scripting

Proficiency in modern development and scripting languages to support automation and integration, including NodeJS, ReactJS, JavaScript, HTML, REST APIs, and SQL. Familiarity with DevOps practices.

Security Acumen

Strong background in threat detection, monitoring security incidents, and implementing risk mitigation strategies to prevent data breaches and compliance violations. 5 + years of Hands on experience Identity and access management projects with specific experience in Non human identities.

Benefits

Insurance and Wellbeing Financial & Retiral Benefit Program Mental Wellbeing Employee Stock Purchase Program (ESPP) Professional Development Reimbursement Time Off Team Outings We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.

EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to make echostar.com and jobs.echostar.com accessible to users.

Please contact [email protected] if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.

Click the links to access the following statements

EEO Policy Statement , Pay Transparency , EEOC Know Your Rights ( English / Spanish )