{"id":4244641,"url":"https://alion.io/job/echostar-security-solutions-architect","title":"Security Solutions Architect","company":{"id":1846584,"name":"EchoStar","domain":"echostar.com","url":"https://alion.io/company/echostar","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jibe","truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Littleton, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":127050,"max":181500,"currency":"USD","period":"year","gross":null,"usd_annual":181500},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"IAM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-28T19:48:00Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T12:29:26Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"EchoStar requires robust security across its digital ecosystem to mitigate risks associated with unauthorized access, supply chain exposure, and identity exploitation. This role addresses these vulnerabilities by establishing a secure Identity and Access Management (IAM) framework and deploying a Zero Trust Architecture across corporate and vendor environments. Key challenges include eliminating authentication friction, controlling lateral movement within networks, and continuously measuring security control effectiveness against evolving threat vectors. The role ensures alignment across IT, compliance, and business units while implementing scalable cybersecurity defenses.\nWhat Success Looks Like (Objectives):\nDesign and deploy a scalable IAM framework that standardizes multi-factor authentication, single sign-on, and privileged access controls for internal employees and external supply chain vendors to meet security OKRs\nImplement a Zero Trust Architecture utilizing identity-driven user and network segmentation to restrict unauthorized lateral movement across corporate networks\nEstablish data-driven metrics to evaluate the operational effectiveness of production IAM controls and proactively remediate identified deficiencies\nIntegrate AI-driven threat detection tools and automation into the identity and access control stack to enhance behavioral anomaly detection and incident response capabilities\nLead security intake processes for new enterprise initiatives, defining technical IAM and security architecture requirements to ensure seamless control integration into new deployments\nCore Skills, Competencies, and Key Experiences (What you’ll bring)\nStrong skills in enterprise IAM architecture, privileged access management, and Zero Trust design principles, including user- and network-level segmentation controls\nAbility to analyze Cyber Threat Intelligence (CTI) frameworks to anticipate identity-based attack vectors and proactively update security architectures against emerging vulnerabilities\nProblem solving in utilizing vulnerability assessment tools, penetration testing methodologies, and automated control verification platforms to remediate access vulnerabilities\nAI Application in leveraging AI-driven security operations and tooling to automate identity threat research and technical risk identification\nDecision making and cross-functional leadership to align complex IAM and cybersecurity engineering requirements with corporate business objectives\nAdditional Qualifications:\nExposure to threat modeling, secure architecture design, or enterprise security audits within large-scale network infrastructure environments\nCandidates must be willing to participate in at least one in-person interview.\nVisa sponsorship not available for this role.\nMinimum Requirements\nMinimum Education: Bachelor’s Degree in Computer Science, Information Technology, related discipline, or commensurate industry experience\nMinimum Experience: Critical experience demonstrating comprehensive understanding of cybersecurity principles, concepts, and technologies\nRequired Technical Skills: Must have experience with:\nIdentity and Access Management (IAM) frameworks\nZero Trust Architecture and network segmentation controls\nCyber Threat Intelligence (CTI) frameworks\nVulnerability assessment and penetration testing tools\n#LI-JZ2\n#LI-JZ2\nSalary Range\nCompensation: $127,050.00/Year - $181,500.00/Year\nAbout Our Department\nOur Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our team members play a vital role in connecting consumers with the products and platforms of tomorrow.\nAbout Our Company\nEchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products.\nToday, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV.\nBenefits\nWe offer meaningful health perks, including flexible spending accounts, HSA, a 401(k) plan with company match, employee stock purchase plan, career opportunities, and a flexible time away plan. Review a benefits summary here:EchoStar Benefits \nThe base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies. Compensation is based on the role's location and is subject to change.\nCandidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws.\nThis job posting will be active for a minimum of 3 days and will continue to extend by 3 days until the position is filled.\nWe pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.\nEchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to make echostar.com and jobs.echostar.com accessible to users. Please contact  if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications. If you have questions regarding your application or the recruitment process please email .\nClick the links to access the following statements: EEO Policy Statement, Pay Transparency, EEOC Know Your Rights (English / Spanish)\nDesign and deploy a scalable IAM framework that standardizes multi-factor authentication, single sign-on, and privileged access controls for internal employees and external supply chain vendors to meet security OKRs\nImplement a Zero Trust Architecture utilizing identity-driven user and network segmentation to restrict unauthorized lateral movement across corporate networks\nEstablish data-driven metrics to evaluate the operational effectiveness of production IAM controls and proactively remediate identified deficiencies\nIntegrate AI-driven threat detection tools and automation into the identity and access control stack to enhance behavioral anomaly detection and incident response capabilities\nLead security intake processes for new enterprise initiatives, defining technical IAM and security architecture requirements to ensure seamless control integration into new deployments\nStrong skills in enterprise IAM architecture, privileged access management, and Zero Trust design principles, including user- and network-level segmentation controls\nAbility to analyze Cyber Threat Intelligence (CTI) frameworks to anticipate identity-based attack vectors and proactively update security architectures against emerging vulnerabilities\nProblem solving in utilizing vulnerability assessment tools, penetration testing methodologies, and automated control verification platforms to remediate access vulnerabilities\nAI Application in leveraging AI-driven security operations and tooling to automate identity threat research and technical risk identification\nDecision making and cross-functional leadership to align complex IAM and cybersecurity engineering requirements with corporate business objectives\nAdditional Qualifications:\nExposure to threat modeling, secure architecture design, or enterprise security audits within large-scale network infrastructure environments\nCandidates must be willing to participate in at least one in-person interview.\nVisa sponsorship not available for this role.\nMinimum Requirements\nMinimum Education: Bachelor’s Degree in Computer Science, Information Technology, related discipline, or commensurate industry experience\nMinimum Experience: Critical experience demonstrating comprehensive understanding of cybersecurity principles, concepts, and technologies\nRequired Technical Skills: Must have experience with:\nIdentity and Access Management (IAM) frameworks\nZero Trust Architecture and network segmentation controls\nCyber Threat Intelligence (CTI) frameworks\nVulnerability assessment and penetration testing tools\n#LI-JZ2\n#LI-JZ2","description_format":"text","description_chars":9394,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Satellite Communications","Internet Service Providers","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-13T12:18:50Z"}],"visa":[],"liveness":{"score":39,"band":"fade","label":"Fading","p_open":1,"p_active":0.714,"p_room":0.55,"age_days":15,"expected_fill_days":13,"reasons":["conf:1","win:tail","comp:brand"],"computed_at":"2026-11-13T13:52:39Z"},"pay":{"stated_usd_annual":181500,"is_top_pay":true},"html_url":"https://alion.io/job/echostar-security-solutions-architect","json_url":"https://alion.io/job/echostar-security-solutions-architect.json","meta":{"generated_at":"2026-11-13T13:52:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27830,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1846584},"rest":"https://alion.io/mcp/rest/get_company?id=1846584"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fechostar-security-solutions-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fechostar-security-solutions-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fechostar-security-solutions-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/echostar-security-solutions-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fechostar-security-solutions-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4244641}},{"tool":"search_jobs","arguments":{"company":"echostar.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4244641},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}