E-3 Visa Infrastructure Security Engineer Jobs
Infrastructure Security Engineer roles qualify as E-3 visa specialty occupations, making them strong candidates for visa sponsorship. Australian professionals with degrees in cybersecurity, computer science, or information systems can target U.S. employers who regularly file LCAs for security engineering talent, with no lottery and unlimited two-year renewals.
Find E-3 Visa Infrastructure Security Engineer JobsOverview
Showing 5 of 29+ Infrastructure Security Engineer jobs
See all Infrastructure Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Infrastructure Security Engineer roles.
Get Access To All JobsRequisition ID
94128
Department
Tech Data AI Ventures
Job Function
Tech Data AI Ventures
Location
Remote, New York, United States
Role Location Designation
Hybrid - 3 days per quarter
Role Summary
Own New York Life’s platform operating system (OS) standards and the hardened/certified image artifacts used to build workloads across hybrid environments. This role engineers and governs standardized build paths for Linux and Windows platforms, including on-prem VM templates, AWS EC2 base images/AMIs, node images, and container base images. The engineer also owns the Terraform “golden path” modules that provision these platforms, implementing guardrails and enforcement to ensure compliant, repeatable builds at scale. Success requires strong cross-platform OS expertise, infrastructure-as-code (Terraform), image lifecycle engineering, and close partnership with ETS to execute the standard golden path across teams.
What You’ll Do:
Vulnerability Management:
- Research and download all patches for the Compute environment
- Test each of the patches to ensure that each patch resolves its intended vulnerability or issue.
- Bundle the vendor patches and release them to the team for non-prod deployment; be available to resolve issues before and during and after production release.
- If a critical patch is released from a vendor during or in between patch cycles, immediately research the vulnerability, test the patch and prepare it for an out of band patch cycle if necessary.
Platform OS Standards & Certified Images:
- Define and maintain cross-platform OS standards for Linux and Windows (configuration baselines, hardening, packages, services, logging, time sync, and required agents).
- Engineer hardened/certified image artifacts: install/base images, on-prem VM templates, AWS AMIs for EC2, node images, and container base images.
- Coordinate certification and security sign-off for image releases (CIS-aligned hardening, approved crypto settings, certificates, and required controls).
- Maintain image versioning, release notes, and lifecycle (deprecation, end-of-support posture, and upgrade paths) with clear consumer guidance.
- Ensure that engineering, design, server build, configuration and other related documentation is present and up to date and easily retrievable.
Terraform Golden Path Modules:
- Own and evolve Terraform modules that implement the standard “golden path” for provisioning compliant OS platforms across environments.
- Design modules to be reusable, opinionated, and safe-by-default (networking hooks, identity integrations, logging/monitoring, secrets handling, tagging/metadata).
- Enable Git-based workflows and CI/CD for module promotion and consumption at scale (testing, validation, approvals, and rollback patterns).
Guardrails, Enforcement & Exception Workflow:
- Implement and operate guardrails/enforcement to prevent drift from OS standards (policy-as-code, validations, and automated compliance checks).
- Define and run the exception workflow: intake, risk assessment, approvals, time-bound waivers, tracking, and remediation plans.
- Partner with Security, IAM, and Risk teams to ensure governance, auditability, and evidence collection for standards adoption.
Rollout Sequencing & Operations:
- Plan and execute rollout sequencing for new standards and image releases (pilot early adopters broad rollout), minimizing operational risk.
- Operate production support for golden path platforms, including incident response, root cause analysis, and continuous improvements to reduce repeat issues.
- Establish runbooks, operational procedures, and communications for consumers and platform operators.
Monitoring & Observability:
- Define and implement monitoring and dashboards for image/standard adoption, compliance status, and drift detection across Linux, Windows, EC2/AMI, and container bases.
- Integrate telemetry with enterprise monitoring to provide proactive alerting and visibility for stakeholders and operations.
Partner & Influence Across Teams (with ETS):
- Partner with technology team to execute the standard golden path at scale, aligning on implementation patterns, operational handoffs, and support models.
- Collaborate with application teams, cloud platform teams, and infrastructure engineering to onboard workloads to the golden path.
- Provide technical leadership and mentorship, driving adoption through clear documentation, training, and stakeholder engagement.
What You'll Bring:
- Experience: 7+ years engineering and operating enterprise OS platforms across Linux and Windows in mission-critical, hybrid environments.
- Golden images & provisioning: Proven expertise building and maintaining hardened/certified images (VM templates, EC2 AMIs, node images, container base images) and operating image build pipelines (e.g., Packer or equivalent).
- Infrastructure as Code: Strong Terraform skills (module design, versioning, testing, promotion) with ability to deliver opinionated “golden path” modules for broad adoption; familiarity with Ansible and automation at scale.
- Cloud & platform engineering: Working knowledge of AWS compute patterns (EC2/AMI), IAM, logging/monitoring integrations, and tagging/metadata standards; exposure to Azure/Oracle Cloud and hybrid operations.
- Guardrails & governance: Experience implementing policy-as-code guardrails (validation, drift detection, compliance scanning) and running structured exception/waiver workflows.
- Core infrastructure fundamentals: Strong grounding in networking (TCP/IP, DNS, HTTP/S), storage (SAN/NAS/local/filesystems), HA/resiliency, and virtualization (VMware/UCS).
- Operational leadership: Excellent incident/change discipline, clear communication to technical and non-technical stakeholders, and ability to partner with ETS and cross-functional teams to execute standards at scale.
How Success Will Be Measured
- Golden path adoption & standardization — higher % of Linux/Windows platforms provisioned via approved Terraform modules and certified artifacts (base images, VM templates, EC2 AMIs, node/container images), with reduced build variance and drift.
- Secure, on-time releases — predictable cadence for certified images, monthly patch readiness, and major OS releases delivered on schedule with documented hardening/approvals to meet SLAs.
- Low-incident change execution — incident-free (or materially reduced) patch/image rollouts supported by guardrails, automated enforcement, rollout sequencing, and validated testing/rollback plans.
- Vulnerability reduction — fewer Vulnerability Incident Tickets (VIT) and improved security posture through hardened standards, continuous remediation, and reduced repeat findings across Linux services and Windows workloads.
- Operational excellence — fewer platform incidents attributable to standards/images, improved MTTR via runbooks and observability, and strong ServiceNow SLA performance (tickets closed within SLA).
- Governance, exceptions & audit readiness — efficient exception workflow (clear SLAs, time-bound waivers, tracked remediation) plus complete, consistent, easily retrievable documentation/evidence for audits and quarterly reviews.
Working Model
Hybrid role based in New York, NY with periodic on-site participation for key release and change windows. Availability after-hours for critical issue engagement is expected. You’ll operate under defined governance and established change procedures, partnering closely with ETS and cross-functional teams to execute the standard golden path at scale, maintain hardened/certified image artifacts, and keep platform standards audit-ready across Linux, Windows, and AWS.
Pay Transparency
Salary Range: $90,000-$128,500
Overtime eligible: Exempt
Discretionary bonus eligible: Yes
Sales bonus eligible: No
Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.
Company Overview
At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that drive lasting impact.
Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem-solving, and purpose-driven innovation. Here, you’ll find the rare balance of long-standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress.
As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it.
Our Benefits
We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work.
Our Commitment to Inclusion
At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities.
Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation. We're proud that due to our mutuality, we operate in the best interests of our policy owners.
Requisition ID
94128
Department
Tech Data AI Ventures
Job Function
Tech Data AI Ventures
Location
Remote, New York, United States
Role Location Designation
Hybrid - 3 days per quarter
Role Summary
Own New York Life’s platform operating system (OS) standards and the hardened/certified image artifacts used to build workloads across hybrid environments. This role engineers and governs standardized build paths for Linux and Windows platforms, including on-prem VM templates, AWS EC2 base images/AMIs, node images, and container base images. The engineer also owns the Terraform “golden path” modules that provision these platforms, implementing guardrails and enforcement to ensure compliant, repeatable builds at scale. Success requires strong cross-platform OS expertise, infrastructure-as-code (Terraform), image lifecycle engineering, and close partnership with ETS to execute the standard golden path across teams.
What You’ll Do:
Vulnerability Management:
- Research and download all patches for the Compute environment
- Test each of the patches to ensure that each patch resolves its intended vulnerability or issue.
- Bundle the vendor patches and release them to the team for non-prod deployment; be available to resolve issues before and during and after production release.
- If a critical patch is released from a vendor during or in between patch cycles, immediately research the vulnerability, test the patch and prepare it for an out of band patch cycle if necessary.
Platform OS Standards & Certified Images:
- Define and maintain cross-platform OS standards for Linux and Windows (configuration baselines, hardening, packages, services, logging, time sync, and required agents).
- Engineer hardened/certified image artifacts: install/base images, on-prem VM templates, AWS AMIs for EC2, node images, and container base images.
- Coordinate certification and security sign-off for image releases (CIS-aligned hardening, approved crypto settings, certificates, and required controls).
- Maintain image versioning, release notes, and lifecycle (deprecation, end-of-support posture, and upgrade paths) with clear consumer guidance.
- Ensure that engineering, design, server build, configuration and other related documentation is present and up to date and easily retrievable.
Terraform Golden Path Modules:
- Own and evolve Terraform modules that implement the standard “golden path” for provisioning compliant OS platforms across environments.
- Design modules to be reusable, opinionated, and safe-by-default (networking hooks, identity integrations, logging/monitoring, secrets handling, tagging/metadata).
- Enable Git-based workflows and CI/CD for module promotion and consumption at scale (testing, validation, approvals, and rollback patterns).
Guardrails, Enforcement & Exception Workflow:
- Implement and operate guardrails/enforcement to prevent drift from OS standards (policy-as-code, validations, and automated compliance checks).
- Define and run the exception workflow: intake, risk assessment, approvals, time-bound waivers, tracking, and remediation plans.
- Partner with Security, IAM, and Risk teams to ensure governance, auditability, and evidence collection for standards adoption.
Rollout Sequencing & Operations:
- Plan and execute rollout sequencing for new standards and image releases (pilot early adopters broad rollout), minimizing operational risk.
- Operate production support for golden path platforms, including incident response, root cause analysis, and continuous improvements to reduce repeat issues.
- Establish runbooks, operational procedures, and communications for consumers and platform operators.
Monitoring & Observability:
- Define and implement monitoring and dashboards for image/standard adoption, compliance status, and drift detection across Linux, Windows, EC2/AMI, and container bases.
- Integrate telemetry with enterprise monitoring to provide proactive alerting and visibility for stakeholders and operations.
Partner & Influence Across Teams (with ETS):
- Partner with technology team to execute the standard golden path at scale, aligning on implementation patterns, operational handoffs, and support models.
- Collaborate with application teams, cloud platform teams, and infrastructure engineering to onboard workloads to the golden path.
- Provide technical leadership and mentorship, driving adoption through clear documentation, training, and stakeholder engagement.
What You'll Bring:
- Experience: 7+ years engineering and operating enterprise OS platforms across Linux and Windows in mission-critical, hybrid environments.
- Golden images & provisioning: Proven expertise building and maintaining hardened/certified images (VM templates, EC2 AMIs, node images, container base images) and operating image build pipelines (e.g., Packer or equivalent).
- Infrastructure as Code: Strong Terraform skills (module design, versioning, testing, promotion) with ability to deliver opinionated “golden path” modules for broad adoption; familiarity with Ansible and automation at scale.
- Cloud & platform engineering: Working knowledge of AWS compute patterns (EC2/AMI), IAM, logging/monitoring integrations, and tagging/metadata standards; exposure to Azure/Oracle Cloud and hybrid operations.
- Guardrails & governance: Experience implementing policy-as-code guardrails (validation, drift detection, compliance scanning) and running structured exception/waiver workflows.
- Core infrastructure fundamentals: Strong grounding in networking (TCP/IP, DNS, HTTP/S), storage (SAN/NAS/local/filesystems), HA/resiliency, and virtualization (VMware/UCS).
- Operational leadership: Excellent incident/change discipline, clear communication to technical and non-technical stakeholders, and ability to partner with ETS and cross-functional teams to execute standards at scale.
How Success Will Be Measured
- Golden path adoption & standardization — higher % of Linux/Windows platforms provisioned via approved Terraform modules and certified artifacts (base images, VM templates, EC2 AMIs, node/container images), with reduced build variance and drift.
- Secure, on-time releases — predictable cadence for certified images, monthly patch readiness, and major OS releases delivered on schedule with documented hardening/approvals to meet SLAs.
- Low-incident change execution — incident-free (or materially reduced) patch/image rollouts supported by guardrails, automated enforcement, rollout sequencing, and validated testing/rollback plans.
- Vulnerability reduction — fewer Vulnerability Incident Tickets (VIT) and improved security posture through hardened standards, continuous remediation, and reduced repeat findings across Linux services and Windows workloads.
- Operational excellence — fewer platform incidents attributable to standards/images, improved MTTR via runbooks and observability, and strong ServiceNow SLA performance (tickets closed within SLA).
- Governance, exceptions & audit readiness — efficient exception workflow (clear SLAs, time-bound waivers, tracked remediation) plus complete, consistent, easily retrievable documentation/evidence for audits and quarterly reviews.
Working Model
Hybrid role based in New York, NY with periodic on-site participation for key release and change windows. Availability after-hours for critical issue engagement is expected. You’ll operate under defined governance and established change procedures, partnering closely with ETS and cross-functional teams to execute the standard golden path at scale, maintain hardened/certified image artifacts, and keep platform standards audit-ready across Linux, Windows, and AWS.
Pay Transparency
Salary Range: $90,000-$128,500
Overtime eligible: Exempt
Discretionary bonus eligible: Yes
Sales bonus eligible: No
Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.
Company Overview
At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that drive lasting impact.
Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem-solving, and purpose-driven innovation. Here, you’ll find the rare balance of long-standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress.
As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it.
Our Benefits
We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work.
Our Commitment to Inclusion
At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities.
Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation. We're proud that due to our mutuality, we operate in the best interests of our policy owners.
See all E-3 Visa Infrastructure Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new E-3 Visa Infrastructure Security Engineer Jobs.
Get Access To All JobsTips for Finding E-3 Visa Sponsorship as an Infrastructure Security Engineer
Align your credentials to U.S. specialty occupation standards
Your Australian bachelor's degree in cybersecurity, computer science, or a related field must map directly to the Infrastructure Security Engineer role. If your degree title is non-standard, gather course transcripts showing security-specific coursework to support the specialty occupation determination.
Target employers with active DOL LCA filing history
Search the DOL's Office of Foreign Labor Certification disclosure data for companies that have certified LCAs for security engineering titles. Prior LCA filings for similar roles signal that an employer already understands the E-3 process and won't treat your sponsorship request as a first.
Clarify remote work and worksite details before offer
LCAs are tied to a specific worksite, so a remote or hybrid arrangement requires the employer to file a separate LCA for each work location. Raise this before accepting an offer to avoid delays after your consulate appointment is scheduled.
Use Migrate Mate's E-3 filing service for the LCA and visa paperwork
Once you have a signed offer letter, use Migrate Mate's E-3 filing service to handle your LCA submission to DOL and prepare your DS-160, visa packet, and consulate documents. It reduces back-and-forth with your employer's HR team significantly.
Request your employer certify the LCA before your consulate appointment
DOL must certify the LCA before you can attend your visa interview. Build at least seven business days into your timeline for LCA certification and confirm your employer has submitted it before you schedule your Sydney, Melbourne, or Perth appointment.
Prepare technical documentation proving specialty occupation status
Consular officers can question whether a role genuinely requires a bachelor's degree in a specific field. Bring your job offer letter, an employer support letter describing required qualifications, and your Australian degree certificate to your interview to establish the specialty occupation link clearly.
E-3 Visa Infrastructure Security Engineer: Frequently Asked Questions
How do I find Infrastructure Security Engineer jobs with E-3 visa sponsorship?
Migrate Mate is built specifically for this search. It surfaces Infrastructure Security Engineer roles where employers have confirmed E-3 sponsorship availability, so you're not cold-applying to companies that have never filed an LCA. Filter by role and location to find positions matched to your credentials and visa type.
How much does it cost to get an E-3 visa?
Migrate Mate's E-3 filing service covers the entire process for $499, including the Labor Condition Application, visa document preparation, and consulate appointment guidance. Traditional immigration lawyers charge $2,000–$5,000+ for the same work. The E-3 has less paperwork than most work visas, so paying thousands for legal help is usually unnecessary.
Does an Infrastructure Security Engineer role qualify as an E-3 specialty occupation?
Yes, in most cases. The E-3 requires that the role normally requires at least a bachelor's degree in a specific field. Infrastructure Security Engineer positions typically require a degree in cybersecurity, computer science, or information systems. Roles framed around general IT support or where any bachelor's degree suffices can face scrutiny, so your offer letter should specify the degree field required.
How does the E-3 compare to H-1B for Infrastructure Security Engineer roles?
For Australian nationals, the E-3 is a significantly more practical path. There's no lottery, no annual registration window, and the 10,500-slot annual allocation has never been exhausted. H-1B visa requires surviving a random selection process with roughly a 25% chance in recent years. Both visas require a specialty occupation determination and employer-sponsored LCA, but the E-3 can be applied for at any time of year.
Can I change employers after getting an E-3 as an Infrastructure Security Engineer?
Yes, but you need to restart the filing process with the new employer. Your E-3 status is tied to the specific LCA and employer named in your visa. Your new employer must file and certify a fresh LCA with DOL before you can begin work. You'll also need a new visa stamp unless you're changing status inside the U.S. on a valid E-3 with time remaining.