Senior Engineer - Identity and Access Management

Company Summary

DISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers.

Our product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over-the-top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet).

Our facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development.

EchoStar does not charge any fees to job applicants or candidates at any point during the recruitment and hiring process. We strongly advise all individuals to be vigilant and disregard any unsolicited requests for payment or personal financial information related to an EchoStar employment opportunity.

Summary

Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.

Job Duties and Responsibilities

As the Senior Identity & Access Management (IAM) Engineer at DISH, you will serve as the primary technical consultant for our IAM program. In this critical, high-impact role. You will take full ownership of Okta SSO, Non-Human Identity (NHI), and Cloud Server Access.

You will be the driving force behind modernizing our identity infrastructure-migrating legacy processes and operational scripts into seamless, frictionless Okta-based workflows. By streamlining provisioning, enforcing robust authentication mechanisms for both human and machine identities, and mitigating insider and external threats, you will play a pivotal role in safeguarding DISH's critical systems and data.

Key Responsibilities

• Hybrid Cloud Architecture & Implementation: Architect, design, and implement enterprise-wide Okta-based IAM solutions integrating Okta with Cloud IAM Identity Center, ensuring seamless federation and granular access control, ensuring secure and efficient access for on-premise and cloud-based applications.
• Non-Human Identity (NHI) Management: Design and execute strategies for securing and managing non-human identities, including service accounts, API keys, secrets, certificates, and workload identities across enterprise and cloud (AWS/GCP) environments.
• Legacy Modernization: Lead the effort to migrate old legacy code and scripts to Okta-based workflows and connectors to improve operational efficiency, reduce administrative overhead, and enhance the user experience.
• Workflow Development: Develop sophisticated Okta Workflows to automate the complete lifecycle (JML - Joiner, Mover, Leaver) for both corporate users and Cloud-native system accounts.
• Threat Detection & Incident Response: Maintain identity management programs with a focus on threat detection. Proactively identify potential threats, exploit attempts, and security events related to Directory Services and IAM. Actively contribute to security incident response and mitigate issues appropriately.
• Access Control & Least Privilege: Manage accounts, permissions, and access controls. Collaborate across multiple departments to understand application integrations, ensure secure access protocols, and strictly enforce least privilege principles for all identities.
• Continuous Improvement: Identify, report, and execute remediation for gaps in critical security processes. Stay updated on industry trends, IAM tools, and best practices.

Skills - Experience and Requirements

Required Qualifications & Skills

• IAM Expertise: Extensive hands-on knowledge of IAM concepts, architecture, and best practices, specifically surrounding SSO, identity federation, Privileged Access Management (PAM), and Machine/Non-Human Identity management.

• Okta Proficiency: Deep expertise in the Okta platform with a mandatory, proven capability in building and deploying Okta Workflows.

• Cloud & Workload Identity Experience: Practical experience securing and managing identities within cloud environments, specifically AWS or Google Cloud Platform (GCP) (e.g., AWS IAM roles, GCP Service Accounts, cross-account access, and secrets management).

• Authentication Protocols: Strong understanding of identity federation, SSO, SAML, OAuth, OIDC, MFA, and Role-Based Access Control (RBAC).

• Development & Scripting: Proficiency in modern development and scripting languages to support automation and integration, including NodeJS, ReactJS, JavaScript, HTML, REST APIs, and SQL. Familiarity with DevOps practices.

• Security Acumen: Strong background in threat detection, monitoring security incidents, and implementing risk mitigation strategies to prevent data breaches and compliance violations.

• 5 + years of Hands on experience Identity and access management projects with specific experience in Non human identities.