Green Card Infrastructure Security Engineer Jobs
Infrastructure Security Engineer roles qualify for green card sponsorship under EB-2 and EB-3 when the position requires a bachelor's degree or higher in computer science, information security, or a related field. Employers file a PERM labor certification with DOL before petitioning USCIS, permanently sponsoring you rather than extending a temporary status.
Find Green Card Infrastructure Security Engineer JobsOverview
Showing 5 of 71+ Infrastructure Security Engineer jobs
See all 71+ Infrastructure Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Infrastructure Security Engineer roles.
Get Access To All JobsJob Classification:
Technology - Engineering & Cloud
Are you interested in building secure, scalable identity capabilities that enable innovation, speed, agility and operational efficiency? The Global Technology team takes pride in a culture where digital transformation, risk management and engineering excellence are built into how we work. When you join our organization, you will help protect the enterprise while growing your technical and leadership capabilities in a highly collaborative environment.
Your Team & Role
As a Senior Identity & Access Management (IAM) Engineer, you will design, implement and support enterprise identity solutions across Microsoft Entra ID, Active Directory and identity governance platforms. You will partner with product owners, application teams, architects, security, risk and operations to modernize authentication, automate identity lifecycle processes and strengthen access governance. The role requires hands-on engineering, disciplined troubleshooting and clear documentation from requirements and design through testing, cutover and production support.
Here Is What You Can Expect on a Typical Day
- Engineer and support IAM capabilities across Microsoft Entra ID, Active Directory and enterprise identity platforms, with attention to security, availability and operational readiness.
- Onboard and integrate applications using SAML 2.0, OpenID Connect, OAuth 2.0 and SCIM, including metadata, certificates, redirect URIs, claims, attributes and provisioning rules.
- Design and maintain role-based access control, permission sets, group-based entitlement models and segregation-of-duties controls that support least privilege.
- Support identity lifecycle processes for joiners, movers and leavers, including provisioning, de-provisioning, approvals, access reviews, expiration and exception handling.
- Develop and enforce Microsoft Entra Conditional Access, MFA, passwordless authentication and Privileged Identity Management controls.
- Plan and execute tenant-to-tenant and hybrid identity changes, including application discovery, identity mapping, domain and UPN considerations, cross-tenant synchronization, cutover and validation.
- Troubleshoot complex authentication, authorization, token, federation, directory synchronization, Kerberos, SSO and provisioning issues at the L2/L3 engineering level.
- Automate operational and compliance activities through PowerShell, Microsoft Graph and platform APIs, with appropriate testing, logging and change controls.
- Collaborate with application owners, architects, risk, audit and global engineering teams to translate requirements into secure, supportable technical solutions.
- Create and maintain engineering specifications, architecture diagrams, runbooks, support procedures, test evidence and audit-ready control documentation.
- Participate in Agile delivery, backlog refinement, estimation, testing, release planning and post-implementation support; provide knowledge transfer and mentoring to other engineers.
The Skills & Expertise You Bring
- Bachelor’s degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience.
- 5+ years of IAM, identity security or access-management engineering experience, with 7+ years of overall information technology or cybersecurity experience preferred.
- Hands-on experience with Microsoft Entra ID and Active Directory in enterprise or hybrid environments.
- Demonstrated experience integrating applications for SSO and automated provisioning using SAML, OIDC, OAuth and SCIM.
- Working knowledge of identity governance concepts, including RBAC, access certifications, segregation of duties, lifecycle management and audit evidence.
- Experience with one or more enterprise IAM platforms such as Silverfort, Bloodhound, Veza, Microsoft Defender.
- Strong knowledge of Conditional Access, MFA, passwordless authentication, PIM/PAM, identity protection and least-privilege principles.
- Experience troubleshooting identity flows across cloud applications, on-premises directories, federation services and provisioning connectors.
- PowerShell scripting experience; familiarity with Microsoft Graph, REST APIs, JSON, XML, SQL.
- Ability to evaluate complex technical problems, identify risk, recommend practical remediation and drive issues through resolution.
- Excellent written and verbal communication skills, with the ability to work effectively with technical teams, control partners and business stakeholders.
- Experience working in Agile/Scrum environments and using Jira or comparable planning and delivery tools.
Core Technical Knowledge
Identity platforms
Microsoft Entra ID, Active Directory, CyberArk, Veza
Authentication & provisioning
SAML 2.0, OIDC, OAuth 2.0, SCIM, SSO, federation, MFA, FIDO2, Windows Hello for Business
Governance & privileged access
RBAC, segregation of duties, access reviews, lifecycle management, PIM, PAM, least privilege
Directory & hybrid identity
LDAP, Entra Connect, cross-tenant synchronization, guest B2B/B2C, app registrations, enterprise applications
Automation & engineering
PowerShell, Microsoft Graph, REST APIs, JSON, XML, SQL; engineering specifications, testing and runbooks
Cloud & enterprise integrations
Microsoft Azure, AWS IAM concepts, ServiceNow, SAP and other SaaS/on-premises applications
Delivery & operations
Agile/Scrum, Jira, incident/problem/change management, monitoring, audit support and production readiness
Preferred Qualifications
- Experience supporting regulated environments and responding to SOX, PCI, internal audit or similar control requirements.
- Experience with identity tenant migrations, domain or forest consolidation, cross-tenant synchronization and global cutover coordination.
- Experience implementing passwordless authentication and reducing standing privileged access through PIM/PAM.
- Familiarity with Azure Monitor, Log Analytics, Splunk or comparable monitoring and security analytics tools.
- Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft cybersecurity credentials, SailPoint, Okta or CyberArk certifications.
- Experience working across regions and time zones, including occasional support for planned production changes outside core business hours.
Success in This Role
Success means delivering secure and supportable identity services, reducing manual access processes, improving authentication reliability and producing clear evidence that controls operate as designed. You will be recognized for sound engineering judgment, disciplined execution, strong partnership and the ability to convert complex identity requirements into practical enterprise solutions.
You’ll Love Working Here Because You Can
Join a team and culture where your voice matters and where your work directly strengthens the security and experience of employees, partners and customers. You will have opportunities to deepen your identity expertise, contribute to modernization initiatives.
What we offer you:
Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $104,000.00 to $171,600.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.
- Market competitive base salaries, with a yearly bonus potential at every level.
- Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
- 401(k) plan with company match (up to 4%).
- Company-funded pension plan.
- Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.
- Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
- Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.
- Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period).
Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. To find out more about our Total Rewards package, visit Work Life Balance | Prudential Careers. Some of the above benefits may not apply to part-time employees scheduled to work less than 20 hours per week.
Prudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.
Prudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.
To maintain the integrity and security of our hiring process, Prudential may use identity verification technologies. Your consent will be obtained before any verification takes place.
If you need an accommodation to complete the application process, please email accommodations.hw@prudential.com.
If you are experiencing a technical issue with your application or an assessment, please email careers.technicalsupport@prudential.com to request assistance.
Job Classification:
Technology - Engineering & Cloud
Are you interested in building secure, scalable identity capabilities that enable innovation, speed, agility and operational efficiency? The Global Technology team takes pride in a culture where digital transformation, risk management and engineering excellence are built into how we work. When you join our organization, you will help protect the enterprise while growing your technical and leadership capabilities in a highly collaborative environment.
Your Team & Role
As a Senior Identity & Access Management (IAM) Engineer, you will design, implement and support enterprise identity solutions across Microsoft Entra ID, Active Directory and identity governance platforms. You will partner with product owners, application teams, architects, security, risk and operations to modernize authentication, automate identity lifecycle processes and strengthen access governance. The role requires hands-on engineering, disciplined troubleshooting and clear documentation from requirements and design through testing, cutover and production support.
Here Is What You Can Expect on a Typical Day
- Engineer and support IAM capabilities across Microsoft Entra ID, Active Directory and enterprise identity platforms, with attention to security, availability and operational readiness.
- Onboard and integrate applications using SAML 2.0, OpenID Connect, OAuth 2.0 and SCIM, including metadata, certificates, redirect URIs, claims, attributes and provisioning rules.
- Design and maintain role-based access control, permission sets, group-based entitlement models and segregation-of-duties controls that support least privilege.
- Support identity lifecycle processes for joiners, movers and leavers, including provisioning, de-provisioning, approvals, access reviews, expiration and exception handling.
- Develop and enforce Microsoft Entra Conditional Access, MFA, passwordless authentication and Privileged Identity Management controls.
- Plan and execute tenant-to-tenant and hybrid identity changes, including application discovery, identity mapping, domain and UPN considerations, cross-tenant synchronization, cutover and validation.
- Troubleshoot complex authentication, authorization, token, federation, directory synchronization, Kerberos, SSO and provisioning issues at the L2/L3 engineering level.
- Automate operational and compliance activities through PowerShell, Microsoft Graph and platform APIs, with appropriate testing, logging and change controls.
- Collaborate with application owners, architects, risk, audit and global engineering teams to translate requirements into secure, supportable technical solutions.
- Create and maintain engineering specifications, architecture diagrams, runbooks, support procedures, test evidence and audit-ready control documentation.
- Participate in Agile delivery, backlog refinement, estimation, testing, release planning and post-implementation support; provide knowledge transfer and mentoring to other engineers.
The Skills & Expertise You Bring
- Bachelor’s degree in computer science, information systems, cybersecurity or a related field, or equivalent practical experience.
- 5+ years of IAM, identity security or access-management engineering experience, with 7+ years of overall information technology or cybersecurity experience preferred.
- Hands-on experience with Microsoft Entra ID and Active Directory in enterprise or hybrid environments.
- Demonstrated experience integrating applications for SSO and automated provisioning using SAML, OIDC, OAuth and SCIM.
- Working knowledge of identity governance concepts, including RBAC, access certifications, segregation of duties, lifecycle management and audit evidence.
- Experience with one or more enterprise IAM platforms such as Silverfort, Bloodhound, Veza, Microsoft Defender.
- Strong knowledge of Conditional Access, MFA, passwordless authentication, PIM/PAM, identity protection and least-privilege principles.
- Experience troubleshooting identity flows across cloud applications, on-premises directories, federation services and provisioning connectors.
- PowerShell scripting experience; familiarity with Microsoft Graph, REST APIs, JSON, XML, SQL.
- Ability to evaluate complex technical problems, identify risk, recommend practical remediation and drive issues through resolution.
- Excellent written and verbal communication skills, with the ability to work effectively with technical teams, control partners and business stakeholders.
- Experience working in Agile/Scrum environments and using Jira or comparable planning and delivery tools.
Core Technical Knowledge
Identity platforms
Microsoft Entra ID, Active Directory, CyberArk, Veza
Authentication & provisioning
SAML 2.0, OIDC, OAuth 2.0, SCIM, SSO, federation, MFA, FIDO2, Windows Hello for Business
Governance & privileged access
RBAC, segregation of duties, access reviews, lifecycle management, PIM, PAM, least privilege
Directory & hybrid identity
LDAP, Entra Connect, cross-tenant synchronization, guest B2B/B2C, app registrations, enterprise applications
Automation & engineering
PowerShell, Microsoft Graph, REST APIs, JSON, XML, SQL; engineering specifications, testing and runbooks
Cloud & enterprise integrations
Microsoft Azure, AWS IAM concepts, ServiceNow, SAP and other SaaS/on-premises applications
Delivery & operations
Agile/Scrum, Jira, incident/problem/change management, monitoring, audit support and production readiness
Preferred Qualifications
- Experience supporting regulated environments and responding to SOX, PCI, internal audit or similar control requirements.
- Experience with identity tenant migrations, domain or forest consolidation, cross-tenant synchronization and global cutover coordination.
- Experience implementing passwordless authentication and reducing standing privileged access through PIM/PAM.
- Familiarity with Azure Monitor, Log Analytics, Splunk or comparable monitoring and security analytics tools.
- Relevant certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft cybersecurity credentials, SailPoint, Okta or CyberArk certifications.
- Experience working across regions and time zones, including occasional support for planned production changes outside core business hours.
Success in This Role
Success means delivering secure and supportable identity services, reducing manual access processes, improving authentication reliability and producing clear evidence that controls operate as designed. You will be recognized for sound engineering judgment, disciplined execution, strong partnership and the ability to convert complex identity requirements into practical enterprise solutions.
You’ll Love Working Here Because You Can
Join a team and culture where your voice matters and where your work directly strengthens the security and experience of employees, partners and customers. You will have opportunities to deepen your identity expertise, contribute to modernization initiatives.
What we offer you:
Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $104,000.00 to $171,600.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills.
- Market competitive base salaries, with a yearly bonus potential at every level.
- Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
- 401(k) plan with company match (up to 4%).
- Company-funded pension plan.
- Wellness Programs including up to $1,600 a year for reimbursement of items purchased to support personal wellbeing needs.
- Work/Life Resources to help support topics such as parenting, housing, senior care, finances, pets, legal matters, education, emotional and mental health, and career development.
- Education Benefit to help finance traditional college enrollment toward obtaining an approved degree and many accredited certificate programs.
- Employee Stock Purchase Plan: Shares can be purchased at 85% of the lower of two prices (Beginning or End of the purchase period).
Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. To find out more about our Total Rewards package, visit Work Life Balance | Prudential Careers. Some of the above benefits may not apply to part-time employees scheduled to work less than 20 hours per week.
Prudential Financial, Inc. of the United States is not affiliated with Prudential plc. which is headquartered in the United Kingdom.
Prudential is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, national origin, genetics, disability, marital status, age, veteran status, domestic partner status, medical condition or any other characteristic protected by law.
To maintain the integrity and security of our hiring process, Prudential may use identity verification technologies. Your consent will be obtained before any verification takes place.
If you need an accommodation to complete the application process, please email accommodations.hw@prudential.com.
If you are experiencing a technical issue with your application or an assessment, please email careers.technicalsupport@prudential.com to request assistance.
See all 71+ Green Card Infrastructure Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Green Card Infrastructure Security Engineer Jobs.
Get Access To All JobsTips for Finding Green Card Sponsorship as an Infrastructure Security Engineer
Document your security credentials before applying
PERM requires proof your qualifications match the job requirements exactly. Gather CISSP, CISM, or CCSP certificates, degree transcripts, and employer letters that tie your experience to specific infrastructure security functions like firewall management, SIEM administration, or zero-trust architecture.
Target employers with active PERM filing history
Search DOL PERM disclosure data for infrastructure security job titles at companies you're targeting. Firms that have filed PERM for similar roles before have established internal processes, which shortens your timeline and reduces the risk of a first-time employer abandoning the petition mid-process.
Verify the job description matches EB-2 or EB-3 requirements
EB-2 requires the employer to justify why the role needs an advanced degree or specialized expertise beyond a standard bachelor's. For infrastructure security, roles requiring deep expertise in cloud security architecture or advanced threat modeling typically support EB-2; general network security analyst duties usually align with EB-3.
Use Migrate Mate to find sponsoring employers faster
Searching broadly wastes time on employers who won't sponsor. Migrate Mate filters infrastructure security roles by green card sponsorship history, so every application you send goes to an employer already familiar with the PERM process and willing to cover its costs.
Confirm the prevailing wage tier before accepting an offer
PERM requires your employer to pay the DOL prevailing wage for the role's location and skill level. Use the OFLC Wage Search to check which wage level your duties fall under before negotiating. A mismatch between your offer and the certified wage level will require an amended LCA filing.
Plan around PERM recruitment timelines during offer negotiations
Before USCIS reviews your I-140 petition, your employer must complete a DOL-mandated recruitment process lasting at least 30 days, plus additional advertising steps. Factor six to twelve months for PERM certification into your start date discussions so neither party is surprised by the mandatory waiting period.
Green Card Infrastructure Security Engineer: Frequently Asked Questions
Does an Infrastructure Security Engineer role qualify for EB-2 or EB-3 sponsorship?
Most infrastructure security roles qualify for EB-3 as skilled professionals requiring a bachelor's degree in computer science, information security, or a closely related field. EB-2 is available when the position genuinely requires an advanced degree or when the employer can demonstrate the role demands a level of specialized knowledge beyond a standard four-year degree. Your employer's attorney will determine the appropriate category based on the actual job duties listed in the PERM application.
How does PERM green card sponsorship differ from H-1B for this role?
The H-1B visa is a temporary status capped at 85,000 new visas annually, subject to a lottery that denies many qualified candidates regardless of merit. PERM-based EB-2 and EB-3 sponsorship has no annual lottery and leads to permanent residency rather than a renewable temporary status. The tradeoff is time: PERM labor certification alone can take six to twelve months before USCIS even reviews the I-140 petition, making early employer conversations critical for infrastructure security professionals planning long-term U.S. careers.
Where can I find Infrastructure Security Engineer jobs that offer green card sponsorship?
Migrate Mate is built specifically to surface roles where employers have a documented history of green card sponsorship. Rather than filtering thousands of generic job listings, you can search directly for infrastructure security positions at companies that have already filed PERM applications, which signals both sponsorship willingness and the operational capacity to manage the process. This saves significant time compared to asking HR teams whether they sponsor after you've already applied.
What happens to my green card case if I change employers during the process?
If you switch employers after USCIS approves your I-140 petition and your priority date becomes current, you may be able to port your petition to a new employer in a same or similar occupational classification under AC21 portability rules. Changing employers before I-140 approval, or before 180 days in adjustment of status, typically requires the new employer to restart the PERM process from the beginning. Infrastructure security roles generally qualify as same or similar to adjacent cybersecurity and network engineering positions, but your new employer's attorney will need to confirm the occupational match.
What security-specific documentation strengthens a PERM application for this role?
DOL requires the employer to show that the job genuinely requires the stated minimum qualifications and that no minimally qualified U.S. worker was available during the recruitment period. For infrastructure security, detailed technical requirements tied to specific platforms, compliance frameworks like NIST or ISO 27001, or specialized tools like Palo Alto, Splunk, or CrowdStrike make it harder to argue that a generic candidate could fill the role. Your employer's attorney uses O*NET to benchmark the occupation, and your credentials should map clearly to the specific duties listed in the certified job description.