**Company Summary** EchoStar is reimagining the future of connectivity. Our business reach spans satellite television service, live-streaming and on-demand programming, smart home installation services, mobile plans and products. Today, our brands include Boost Mobile, DISH TV, Gen Mobile, Hughes and Sling TV. **Department Summary** Our Wireless Technology team is transforming the future of connectivity by building and enhancing the country’s first virtualized, standalone 5G wireless network from scratch. Our network is free of the limitations of the past, and flexible to satisfy all the social, economic and transformative needs of the changing world. **Job Duties and Responsibilities** **Candidates must be willing to participate in at least one in-person interview, which may include a live whiteboarding or technical assessment session.** We are seeking a highly skilled and strategic Network Security Engineer to join our team The ideal candidate will have deep expertise in firewall management, on-premise security, AWS security groups, Network Access Control (NAC), Public Key Infrastructure (PKI), and VPNs. This role requires both strategic thinking and tactical execution, with the ability to build security configurations from scratch and collaborate effectively with various teams to identify and resolve security issues. **Key Responsibilities:** + Design, implement, and manage network security solutions (firewalls, NAC, VPNs, PKI, AWS security) aligned with strategic goals + Build and deploy security configurations across network and cloud environments following best practices + Collaborate with IT, DevOps, and application teams to integrate security and troubleshoot issues + Identify, troubleshoot, and resolve network security issues, providing hands-on support as needed + Contribute to security initiatives, educate teams on tools, capabilities, and best practices + Support audits, maintain documentation, ensure compliance, and drive continuous improvement in security posture **Skills, Experience and Requirements** **Education and Experience:** + Bachelor’s degree in Electrical/Computer Engineering preferred, or four plus years of professional experience in large enterprise or carrier space + Professional networking certifications in Palo Alto Network Firewalls is a plus **Skills and Qualifications:** + Network security architecture, design, and engineering for internal and external boundaries + Hardening of physical and virtual network and peripheral device configurations + Evaluation, design, implementation, and support of firewalls and IDS/IPS systems, including Palo Alto (physical, virtual, Panorama) + Design and implementation of VPN and IPSec connectivity + Deep understanding of PKI, including X509 certificates, CA/SubCA principles, symmetric/asymmetric keys, HSMs, TLS/SSL, and IPSec + Strong knowledge of DNS, DHCP, IPAM, network security policies, auditing, and enforcement + Solid understanding of the OSI model, routing, switching, IPv4/IPv6, subnetting, and core network protocols **Salary Ranges** Compensation: $83,160.00/Year - $118,800.00/Year **Benefits** We offer versatile health perks, including flexible spending accounts, HSA, a 401(k) Plan with company match, ESPP, career opportunities, and a flexible time away plan; all benefits can be viewed here: DISH Benefits . The base pay range shown is a guideline. Individual total compensation will vary based on factors such as qualifications, skill level, and competencies; compensation is based on the role's location and is subject to change based on work location. Candidates need to successfully complete a pre-employment screen, which may include a drug test and DMV check. Our company is committed to fostering an inclusive and equitable workplace where every individual has the opportunity to succeed. We are dedicated to providing individuals with criminal or arrest records a fair chance of employment in accordance with local, state, and federal laws. The posting will be active for a minimum of 3 days. The active posting will continue to extend by 3 days until the position is filled. We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer - Veteran/Disability. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. We are a true merit-based organization and work hard so there are no artificial barriers to one's potential success. DISH is committed to a workforce where everyone's opportunities are limitless. Please note that you may redact or remove any information that identifies age, date of birth or dates of school attendance/graduation from your application documents before submission and throughout our interview process.