Green Card Devsecops Engineer Jobs
DevSecOps Engineer roles qualify for EB-2 and EB-3 green card sponsorship through PERM labor certification, which requires your employer to document recruitment efforts before filing your I-140 petition. Roles integrating security into CI/CD pipelines and cloud infrastructure routinely meet the specialty occupation and advanced-degree thresholds USCIS applies to this category.
Find Green Card Devsecops Engineer JobsOverview
Showing 5 of 21+ Devsecops Engineer jobs
See all Devsecops Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Devsecops Engineer roles.
Get Access To All JobsAre you ready to build America’s energy future? Form Energy is an American manufacturing and energy technology company. We’re revolutionizing energy storage with cost-effective, multi-day technology designed to keep the electric grid secure and reliable, even during extended periods of stress. By strengthening the electric system and reimagining what’s possible, we’re giving clean energy a whole new form!
In recent years, Form Energy has earned a number of accolades, including being named by TIME as a “Best Invention”, MIT Technology Review as a “Top Climate Tech Company To Watch”, and Fast Company as “One of the Next Big Things In Tech”. We are making rapid progress on our mission of delivering energy storage for a better world, and our team is growing just as rapidly to meet demand. We have signed contracts with leading electric utilities across the United States and production of our iron-air batteries is underway at our first high-volume manufacturing facility in West Virginia.
Working for Form Energy is more than just a job, it’s a chance to be part of something extraordinary. And now - right as we significantly scale up battery manufacturing - might be the most exciting moment in the company’s history to join. We are assembling a team of highly talented and driven individuals across the country. Driven by our core values of humanity, excellence, and creativity, our team is determined to deliver on our mission and transform the energy landscape for the better.
Feeling energized to make a meaningful impact on the world? Then keep reading - you’ve come to the right place.
Role Description
Form Energy is scaling quickly across research, engineering, and manufacturing, and the integrations, automations, and AI-enabled tools that connect our systems need to be built securely from the start. As Senior Staff DevSecOps Engineer on the IT Engineering & Platforms team, you will define and lead how the team embeds security into the design, build, and operation of integrations, ETL/data pipelines, automations, and custom-built tools — including MCP servers and other AI-agent tooling. You will set secure-development standards for the team, work hands-on building and configuring systems yourself, and serve as the senior technical voice on security for everything the team ships.
Relocation assistance is available.
What you'll do:
- Define and lead secure-SDLC practices for integrations, automations, ETL/data pipelines, and custom-built tools — including secure design review, dependency and secrets scanning, and secure coding standards — and mentor other engineers on their application.
- Own application-layer security strategy for the team’s deliverables: static and dynamic analysis (SAST/DAST), dependency and supply-chain vulnerability management, and secrets detection across the codebase and CI/CD pipelines.
- Set the architecture and guardrails for securing AI and agentic tooling specifically — credential scoping and least-privilege access for MCP servers and AI integrations, safe handling of data passed to and from LLM-based tools, and defenses against prompt-injection and data-exfiltration risk in custom AI workflows.
- Harden CI/CD pipelines — least-privilege service accounts, secrets management, signed or verified artifacts, and gated deployments — and establish standards other engineers build against.
- Build and configure integrations, automations, and tooling alongside the DevOps team as needed, modeling the secure-development practices you define.
- Build security observability into what the team ships: audit logging, anomaly alerting, and incident-relevant telemetry for integrations and automations.
- Own a risk-based inventory of the team’s integrations, automations, and custom tools, with documented data flows and access scopes.
- Serve as the senior technical security liaison between IT Engineering & Platforms and the Information Security & GRC vertical — informing policy and control design with implementation-level context.
- Lead response for security-related incidents in integrations and automations, and own the related incident response runbooks.
What you'll bring:
- 9+ years in application security, DevSecOps, or security engineering, including experience building or supporting integrations, automations, or data pipelines in an enterprise IT environment.
- Demonstrated experience setting secure-development standards and mentoring other engineers, not just applying existing standards.
- Strong scripting and programming skills (e.g., Python, JavaScript / TypeScript, or PowerShell) and hands-on experience with REST APIs and JSON.
- Deep, hands-on experience with SAST/DAST tooling, dependency and software composition analysis (SCA), and secrets-management practices.
- Strong command of cloud and identity security fundamentals — least-privilege IAM design, SSO (SAML / OIDC), and secrets/credential management.
- Experience securing CI/CD pipelines end to end and familiarity with version control (Git) and modern deployment practices.
- A pragmatic, detail-oriented approach to building reliable, secure systems in a fast-paced environment, and comfort operating as a peer to both engineering leadership and security/compliance stakeholders.
Preferred Qualifications:
- Experience securing AI/LLM-based tooling or agentic systems, including MCP servers, AI integrations, or similar emerging architectures.
- Experience with iPaaS / integration platforms (e.g., Workato, Boomi, MuleSoft, Zapier) or custom-built integrations.
- Familiarity with compliance frameworks relevant to a SOX or audit-controlled environment (e.g., segregation of duties, change management, access review).
- Experience with cloud platforms (Microsoft Azure preferred, Google Cloud, or AWS) and infrastructure-as-code or configuration-management tooling.
- Experience in a manufacturing, hardware, laboratory, or high-growth technology environment.
#LI-Onsite
Humanity is a cornerstone of Form Energy’s culture, and we make sure our compensation and benefits reflect that. Form Energy offers competitive salaries, stock options, and a holistic benefits package to ensure all employees have what they need to thrive while working here.
When it comes to you and your family’s health, we cover 100% of medical, dental, and vision premiums for full-time employees - and 80% of healthcare premiums for dependents. This starts from day one. We also offer at least 12 weeks of paid leave for new parents (up to 20 weeks for birthing parents), and generous vacation policies to give employees time to recharge when needed.
To build America’s energy future, we need everyone at the table. We are proud to be an equal opportunity employer, and encourage candidates from all backgrounds to apply to our open jobs.
If you may require reasonable accommodations to participate in our interview process, please contact accommodations@formenergy.com. Requests for accommodations will be treated with discretion.
Form Energy is committed to maintaining the privacy of our applicants. Please be aware that we will never solicit sensitive personal information such as Social Security numbers or bank account details during the recruiting or hiring process.
Compensation Range: $170,246 - $212,813
Are you ready to build America’s energy future? Form Energy is an American manufacturing and energy technology company. We’re revolutionizing energy storage with cost-effective, multi-day technology designed to keep the electric grid secure and reliable, even during extended periods of stress. By strengthening the electric system and reimagining what’s possible, we’re giving clean energy a whole new form!
In recent years, Form Energy has earned a number of accolades, including being named by TIME as a “Best Invention”, MIT Technology Review as a “Top Climate Tech Company To Watch”, and Fast Company as “One of the Next Big Things In Tech”. We are making rapid progress on our mission of delivering energy storage for a better world, and our team is growing just as rapidly to meet demand. We have signed contracts with leading electric utilities across the United States and production of our iron-air batteries is underway at our first high-volume manufacturing facility in West Virginia.
Working for Form Energy is more than just a job, it’s a chance to be part of something extraordinary. And now - right as we significantly scale up battery manufacturing - might be the most exciting moment in the company’s history to join. We are assembling a team of highly talented and driven individuals across the country. Driven by our core values of humanity, excellence, and creativity, our team is determined to deliver on our mission and transform the energy landscape for the better.
Feeling energized to make a meaningful impact on the world? Then keep reading - you’ve come to the right place.
Role Description
Form Energy is scaling quickly across research, engineering, and manufacturing, and the integrations, automations, and AI-enabled tools that connect our systems need to be built securely from the start. As Senior Staff DevSecOps Engineer on the IT Engineering & Platforms team, you will define and lead how the team embeds security into the design, build, and operation of integrations, ETL/data pipelines, automations, and custom-built tools — including MCP servers and other AI-agent tooling. You will set secure-development standards for the team, work hands-on building and configuring systems yourself, and serve as the senior technical voice on security for everything the team ships.
Relocation assistance is available.
What you'll do:
- Define and lead secure-SDLC practices for integrations, automations, ETL/data pipelines, and custom-built tools — including secure design review, dependency and secrets scanning, and secure coding standards — and mentor other engineers on their application.
- Own application-layer security strategy for the team’s deliverables: static and dynamic analysis (SAST/DAST), dependency and supply-chain vulnerability management, and secrets detection across the codebase and CI/CD pipelines.
- Set the architecture and guardrails for securing AI and agentic tooling specifically — credential scoping and least-privilege access for MCP servers and AI integrations, safe handling of data passed to and from LLM-based tools, and defenses against prompt-injection and data-exfiltration risk in custom AI workflows.
- Harden CI/CD pipelines — least-privilege service accounts, secrets management, signed or verified artifacts, and gated deployments — and establish standards other engineers build against.
- Build and configure integrations, automations, and tooling alongside the DevOps team as needed, modeling the secure-development practices you define.
- Build security observability into what the team ships: audit logging, anomaly alerting, and incident-relevant telemetry for integrations and automations.
- Own a risk-based inventory of the team’s integrations, automations, and custom tools, with documented data flows and access scopes.
- Serve as the senior technical security liaison between IT Engineering & Platforms and the Information Security & GRC vertical — informing policy and control design with implementation-level context.
- Lead response for security-related incidents in integrations and automations, and own the related incident response runbooks.
What you'll bring:
- 9+ years in application security, DevSecOps, or security engineering, including experience building or supporting integrations, automations, or data pipelines in an enterprise IT environment.
- Demonstrated experience setting secure-development standards and mentoring other engineers, not just applying existing standards.
- Strong scripting and programming skills (e.g., Python, JavaScript / TypeScript, or PowerShell) and hands-on experience with REST APIs and JSON.
- Deep, hands-on experience with SAST/DAST tooling, dependency and software composition analysis (SCA), and secrets-management practices.
- Strong command of cloud and identity security fundamentals — least-privilege IAM design, SSO (SAML / OIDC), and secrets/credential management.
- Experience securing CI/CD pipelines end to end and familiarity with version control (Git) and modern deployment practices.
- A pragmatic, detail-oriented approach to building reliable, secure systems in a fast-paced environment, and comfort operating as a peer to both engineering leadership and security/compliance stakeholders.
Preferred Qualifications:
- Experience securing AI/LLM-based tooling or agentic systems, including MCP servers, AI integrations, or similar emerging architectures.
- Experience with iPaaS / integration platforms (e.g., Workato, Boomi, MuleSoft, Zapier) or custom-built integrations.
- Familiarity with compliance frameworks relevant to a SOX or audit-controlled environment (e.g., segregation of duties, change management, access review).
- Experience with cloud platforms (Microsoft Azure preferred, Google Cloud, or AWS) and infrastructure-as-code or configuration-management tooling.
- Experience in a manufacturing, hardware, laboratory, or high-growth technology environment.
#LI-Onsite
Humanity is a cornerstone of Form Energy’s culture, and we make sure our compensation and benefits reflect that. Form Energy offers competitive salaries, stock options, and a holistic benefits package to ensure all employees have what they need to thrive while working here.
When it comes to you and your family’s health, we cover 100% of medical, dental, and vision premiums for full-time employees - and 80% of healthcare premiums for dependents. This starts from day one. We also offer at least 12 weeks of paid leave for new parents (up to 20 weeks for birthing parents), and generous vacation policies to give employees time to recharge when needed.
To build America’s energy future, we need everyone at the table. We are proud to be an equal opportunity employer, and encourage candidates from all backgrounds to apply to our open jobs.
If you may require reasonable accommodations to participate in our interview process, please contact accommodations@formenergy.com. Requests for accommodations will be treated with discretion.
Form Energy is committed to maintaining the privacy of our applicants. Please be aware that we will never solicit sensitive personal information such as Social Security numbers or bank account details during the recruiting or hiring process.
Compensation Range: $170,246 - $212,813
See all Green Card Devsecops Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Devsecops Engineer Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship as a Devsecops Engineer
Document your security certifications before applying
PERM requires proving your qualifications match the job's minimum requirements. Gather CISSP, CEH, AWS Security, or equivalent credentials now. USCIS scrutinizes whether your degree field aligns with DevSecOps duties, so a credential portfolio fills gaps a generalist CS degree may leave.
Target employers with active PERM filing history
Search for DevSecOps roles at organizations that have previously filed PERM applications in security engineering or cloud infrastructure categories. Companies with dedicated immigration teams process EB-2 and EB-3 cases faster and rarely let petitions lapse during transitions between attorneys.
Use Migrate Mate to filter sponsoring employers by role
Search DevSecOps Engineer positions on Migrate Mate to surface employers with verified green card sponsorship history. Leading with sponsorship intent in your outreach filters out companies unfamiliar with EB-3 PERM timelines for specialized security-engineering roles.
Verify prevailing wage level before accepting an offer
DOL assigns your role a wage level from I to IV based on experience and supervision. Use the OFLC Wage Search to confirm your offered salary meets or exceeds the certified prevailing wage for your SOC code and work location before signing an offer letter.
Clarify job duties to avoid specialty occupation ambiguity
USCIS sometimes challenges DevSecOps petitions when job descriptions blend general IT support with specialized security engineering. Ask your employer to draft the PERM job description around specific duties like threat modeling, SAST/DAST toolchain management, or zero-trust architecture rather than broad IT language.
Understand concurrent filing if your priority date is current
If your country's EB-2 or EB-3 priority date is current when the I-140 is approved, your employer can file the I-485 adjustment of status concurrently. This lets you obtain an EAD and advance parole while the green card processes, maintaining work authorization without visa renewals.
Green Card Devsecops Engineer: Frequently Asked Questions
Does a DevSecOps Engineer role qualify for EB-2 or EB-3 green card sponsorship?
DevSecOps Engineer positions qualify for both categories depending on the employer's stated education requirement. EB-2 applies when the role requires a master's degree or equivalent, while EB-3 covers positions requiring a bachelor's degree. USCIS evaluates whether the role meets the specialty occupation definition, which DevSecOps roles integrating security into software delivery pipelines typically satisfy given the degree-specific knowledge they require.
How does green card sponsorship via PERM differ from H-1B sponsorship for DevSecOps engineers?
H-1B visa is a temporary nonimmigrant status with a three-year initial period and an annual lottery cap for new beneficiaries. PERM-based EB-2 and EB-3 green card sponsorship leads to permanent residency with no annual cap at the petition level. The PERM process requires DOL-supervised recruitment before filing, which adds time upfront but eliminates the lottery uncertainty and provides a permanent employment authorization path rather than a renewable temporary one.
How long does the EB-3 green card process typically take for a DevSecOps Engineer?
The PERM labor certification stage currently averages several months for standard processing, followed by USCIS adjudication of the I-140 petition. If your priority date is current for your country, you can file the I-485 adjustment of status soon after I-140 approval. Total timelines range from roughly one to several years depending on your country of birth, USCIS processing speeds, and whether premium processing is available for your I-140.
Where can I find DevSecOps Engineer jobs that offer green card sponsorship?
Migrate Mate is built specifically to surface jobs with verified employment-based green card sponsorship history, including EB-2 and EB-3 PERM-eligible positions. Filtering by DevSecOps Engineer roles on Migrate Mate lets you focus outreach on employers who have previously navigated PERM filings, which significantly reduces the time spent educating hiring teams about the process.
Can my employer start the PERM process while I am on H-1B or OPT?
Yes. Employers can initiate PERM labor certification while you hold any valid work authorization status. Starting early is common practice because the PERM process is employer-initiated and runs independently of your current visa type. If you are on OPT or cap-gap, your employer completing the PERM and I-140 while you maintain valid status protects continuity and establishes your green card priority date.