Network Security Engineer II

Company Summary
EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products.
Today, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV.
Department Summary
Our Wireless Technology team is pioneering the future of connectivity. We're developing and enhancing a unique hybrid network model-combining our advanced, cloud-native 5G core with the nationwide reach of our partners. This approach ensures our network is flexible and powerful, designed to satisfy the social, economic, and transformative needs of the changing world.
Job Duties and Responsibilities
Candidates must be willing to participate in at least one in-person interview, which may include a live whiteboarding or technical assessment session.
We are seeking a highly skilled and strategic Network Security Engineer to join our team The ideal candidate will have deep expertise in firewall management, on-premise security, AWS security groups, Network Access Control (NAC), Public Key Infrastructure (PKI), and VPNs. This role requires both strategic thinking and tactical execution, with the ability to build security configurations from scratch and collaborate effectively with various teams to identify and resolve security issues.
Key Responsibilities:

• Design, implement, and manage network security solutions (firewalls, NAC, VPNs, PKI, AWS security) aligned with strategic goals
• Build and deploy security configurations across network and cloud environments following best practices
• Collaborate with IT, DevOps, and application teams to integrate security and troubleshoot issues
• Identify, troubleshoot, and resolve network security issues, providing hands-on support as needed
• Contribute to security initiatives, educate teams on tools, capabilities, and best practices
• Support audits, maintain documentation, ensure compliance, and drive continuous improvement in security posture

Skills, Experience and Requirements
Education and Experience:

• Bachelor's degree in Electrical/Computer Engineering preferred, or four plus years of professional experience in large enterprise or carrier space
• Professional networking certifications in Palo Alto Network Firewalls is a plus

Skills and Qualifications:

• Network security architecture, design, and engineering for internal and external boundaries
• Hardening of physical and virtual network and peripheral device configurations
• Evaluation, design, implementation, and support of firewalls and IDS/IPS systems, including Palo Alto (physical, virtual, Panorama)
• Design and implementation of VPN and IPSec connectivity
• Deep understanding of PKI, including X509 certificates, CA/SubCA principles, symmetric/asymmetric keys, HSMs, TLS/SSL, and IPSec
• Strong knowledge of DNS, DHCP, IPAM, network security policies, auditing, and enforcement
• Solid understanding of the OSI model, routing, switching, IPv4/IPv6, subnetting, and core network protocols

Visa sponsorship not available for this role
Salary Ranges
Compensation: $83,160.00/Year - $118,800.00/Year
Benefits
We offer versatile health perks, including flexible spending accounts, HSA, a 401(k) Plan with company match, ESPP, career opportunities, and a flexible time away plan; all benefits can be viewed here: DISH Benefits .
The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies; compensation is based on the role's location and is subject to change based on work location.
Candidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws.
The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled.