H-1B Visa Information Security Engineer Jobs
Information Security Engineer roles qualify as H-1B visa specialty occupations under the computer occupations category, requiring at least a bachelor's degree in cybersecurity, computer science, or a related field. Employers filing H-1B petitions for these roles must certify prevailing wages through DOL before USCIS adjudicates the petition.
Find H-1B Visa Information Security Engineer JobsOverview
Showing 5 of 877+ Information Security Engineer jobs
See all 877+ Information Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Information Security Engineer roles.
Get Access To All JobsINTRODUCTION
The Senior IT Security Architect & Information System Security Officer bridges software delivery and enterprise risk management. This role ensures projects are architected securely from day one, minimizing compliance bottlenecks, protecting critical assets, and ensuring rapid, safe deployments. Acting as both the security designer and compliance lead, the position will govern security controls, lead authorization efforts, and guide engineering teams through risk mitigation.
ROLE AND RESPONSIBILITIES
Key Responsibilities & Deliverables:
-
Security Architecture & System Design:
-
Define and enforce security architecture standards across legacy and modern cloud/hybrid environments.
- Conduct threat modeling and risk assessments during initial project design phases to avoid costly security retrofits late in the delivery cycle.
- Establish secure identity and access management (IAM) strategies and modern authentication standards (e.g., SSO, MFA) to ensure authorized staff and external vendors have seamless, zero-trust access to critical applications without compromising data boundaries.
-
Provide oversight and design standards for Disaster Recovery (DR) and incident response plans during initial project blueprints—ensuring business-critical Medicaid systems can rapidly recover from outages or cyber disruptions with minimal operational downtime.
-
ISSO & Compliance Governance:
-
Lead system compliance and authorization efforts aligned with CMS ARC-AMPE standards, including authoring and maintaining the System Security and Privacy Plan (SSPP), Risk Assessment Reports (RARs), and continuous Plan of Action & Milestones (POA&Ms) to ensure federal requirements are satisfied.
- Change Governance & Security Impact Analyses (SIA): Author, evaluate, and review formal Security Impact Analyses (SIAs) for planned enterprise technology (OET) modifications and new capabilities—ensuring system updates do not degrade existing security postures or disrupt live healthcare operations.
-
Serve as the primary liaison for internal and external cybersecurity audits and compliance reviews (e.g., NIST SP 800-53, FedRAMP, CMMC, or ISO 27001).
-
Continuous Monitoring & Risk Mitigation:
-
Establish continuous security monitoring strategies to identify, track, and remediate vulnerabilities in real time.
-
Translate technical vulnerabilities (e.g., CVEs, patch backlogs) into clear business risk terms for project leadership and executive stakeholders.
-
Data Privacy & Healthcare Compliance:
-
Architect end-to-end data encryption and strict access controls to safeguard sensitive citizen data—specifically Protected Health Information (PHI) and Personally Identifiable Information (PII)—ensuring compliance with HIPAA, CMS, and state privacy mandates.
-
Cross-Functional Integration:
-
Collaborate closely with DevOps and engineering teams to embed security automation into CI/CD pipelines (DevSecOps).
- Provide technical leadership and guidance to project teams to balance security controls with project velocity and system performance.
- Serve as the primary security bridge between project teams and executive leadership—ensuring full alignment with the Chief Information Security Officer (CISO) and Architecture Review Board (ARB) standards to eliminate compliance friction early in the development lifecycle.
- Partner directly with the program’s CMS Certification lead to align technical security designs with evolving CMS certification criteria and federal guidance.
BASIC QUALIFICATIONS
- Education: Bachelor’s Degree from an accredited college or university in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field. Master’s degree preferred.
- General Experience: Minimum of ten (10) years of experience in IT system planning, architecture, and security design.
-
Specialized Security/ISSO Experience:
-
Minimum of five (5) years directly performing ISSO functions, security architecture design, or leading system authorization efforts for complex, large-scale IT implementations.
- Demonstrated, hands-on experience authoring, updating, and defending security control baselines, System Security Plans (SSPs), and active POA&Ms under NIST SP 800-53 and CMS compliance frameworks—specifically with direct familiarity in CMS ARC-AMPE (Acceptable Risk Controls for ACA, Medicaid, and Partner Entities) or the MARS-E to ARC-AMPE transition; candidates must be comfortable producing clear, audit-ready regulatory documentation as a regular deliverable.
PREFERRED QUALIFICATIONS
- Certifications (Preferred): Active industry certifications such as CISSP, CISM, ISSAP, or Certified Cloud Security Professional (CCSP).
LOCATION
Location: Remote
Only W2
INTRODUCTION
The Senior IT Security Architect & Information System Security Officer bridges software delivery and enterprise risk management. This role ensures projects are architected securely from day one, minimizing compliance bottlenecks, protecting critical assets, and ensuring rapid, safe deployments. Acting as both the security designer and compliance lead, the position will govern security controls, lead authorization efforts, and guide engineering teams through risk mitigation.
ROLE AND RESPONSIBILITIES
Key Responsibilities & Deliverables:
-
Security Architecture & System Design:
-
Define and enforce security architecture standards across legacy and modern cloud/hybrid environments.
- Conduct threat modeling and risk assessments during initial project design phases to avoid costly security retrofits late in the delivery cycle.
- Establish secure identity and access management (IAM) strategies and modern authentication standards (e.g., SSO, MFA) to ensure authorized staff and external vendors have seamless, zero-trust access to critical applications without compromising data boundaries.
-
Provide oversight and design standards for Disaster Recovery (DR) and incident response plans during initial project blueprints—ensuring business-critical Medicaid systems can rapidly recover from outages or cyber disruptions with minimal operational downtime.
-
ISSO & Compliance Governance:
-
Lead system compliance and authorization efforts aligned with CMS ARC-AMPE standards, including authoring and maintaining the System Security and Privacy Plan (SSPP), Risk Assessment Reports (RARs), and continuous Plan of Action & Milestones (POA&Ms) to ensure federal requirements are satisfied.
- Change Governance & Security Impact Analyses (SIA): Author, evaluate, and review formal Security Impact Analyses (SIAs) for planned enterprise technology (OET) modifications and new capabilities—ensuring system updates do not degrade existing security postures or disrupt live healthcare operations.
-
Serve as the primary liaison for internal and external cybersecurity audits and compliance reviews (e.g., NIST SP 800-53, FedRAMP, CMMC, or ISO 27001).
-
Continuous Monitoring & Risk Mitigation:
-
Establish continuous security monitoring strategies to identify, track, and remediate vulnerabilities in real time.
-
Translate technical vulnerabilities (e.g., CVEs, patch backlogs) into clear business risk terms for project leadership and executive stakeholders.
-
Data Privacy & Healthcare Compliance:
-
Architect end-to-end data encryption and strict access controls to safeguard sensitive citizen data—specifically Protected Health Information (PHI) and Personally Identifiable Information (PII)—ensuring compliance with HIPAA, CMS, and state privacy mandates.
-
Cross-Functional Integration:
-
Collaborate closely with DevOps and engineering teams to embed security automation into CI/CD pipelines (DevSecOps).
- Provide technical leadership and guidance to project teams to balance security controls with project velocity and system performance.
- Serve as the primary security bridge between project teams and executive leadership—ensuring full alignment with the Chief Information Security Officer (CISO) and Architecture Review Board (ARB) standards to eliminate compliance friction early in the development lifecycle.
- Partner directly with the program’s CMS Certification lead to align technical security designs with evolving CMS certification criteria and federal guidance.
BASIC QUALIFICATIONS
- Education: Bachelor’s Degree from an accredited college or university in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field. Master’s degree preferred.
- General Experience: Minimum of ten (10) years of experience in IT system planning, architecture, and security design.
-
Specialized Security/ISSO Experience:
-
Minimum of five (5) years directly performing ISSO functions, security architecture design, or leading system authorization efforts for complex, large-scale IT implementations.
- Demonstrated, hands-on experience authoring, updating, and defending security control baselines, System Security Plans (SSPs), and active POA&Ms under NIST SP 800-53 and CMS compliance frameworks—specifically with direct familiarity in CMS ARC-AMPE (Acceptable Risk Controls for ACA, Medicaid, and Partner Entities) or the MARS-E to ARC-AMPE transition; candidates must be comfortable producing clear, audit-ready regulatory documentation as a regular deliverable.
PREFERRED QUALIFICATIONS
- Certifications (Preferred): Active industry certifications such as CISSP, CISM, ISSAP, or Certified Cloud Security Professional (CCSP).
LOCATION
Location: Remote
Only W2
See all 877+ H-1B Visa Information Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Information Security Engineer Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as an Information Security Engineer
Map your credentials to SOC codes
Information Security Engineers typically fall under SOC 15-1212. Pull the O*NET profile for that code and confirm your degree and experience align with the listed knowledge requirements before applying, so your H-1B petition has a clean specialty occupation argument.
Target employers with E-Verify enrollment
STEM OPT extensions require E-Verify enrollment, so if you're bridging from OPT to H-1B, filter for employers already enrolled. E-Verify status is publicly searchable and eliminates a common reason sponsorship falls apart late in the hiring process.
Search H-1B filing history on Migrate Mate
Before applying, use Migrate Mate to filter Information Security Engineer roles by employers with verified H-1B LCA filing history. This cuts out companies that haven't sponsored the role before and focuses your applications where approval is already documented.
Verify prevailing wage before negotiating salary
Run your target job title and location through the OFLC Wage Search to confirm the Level I through Level IV wage tiers. Your offer must meet or exceed the certified wage on the LCA, so knowing the floor before negotiations prevents a mismatch that delays filing.
Ask specifically about I-129 timing in the offer stage
The H-1B cap registration window opens in March each year, and the cap-subject petition can't be filed until October 1. Confirm your prospective employer understands this calendar and will initiate the LCA and I-129 filing process early enough to hit the registration deadline.
Document security clearances and certifications separately
Certifications like CISSP, CISM, or government clearances strengthen the specialty occupation argument in your H-1B petition. Collect official credential letters and issuing body documentation now so your employer's attorney can reference them directly in the I-129 support letter.
H-1B Visa Information Security Engineer: Frequently Asked Questions
Does an Information Security Engineer role qualify as an H-1B specialty occupation?
Yes. Information Security Engineer positions typically qualify because they require a bachelor's degree or higher in a directly related field such as cybersecurity, computer science, or information systems. USCIS evaluates the job duties and degree requirement on a case-by-case basis, so the employer's job description must clearly state a specific degree requirement rather than a generalized preference.
Which employers sponsor H-1B visas for Information Security Engineers?
Technology companies, financial institutions, defense contractors, healthcare networks, and large enterprises with dedicated security teams are among the most frequent H-1B sponsors for this role. Migrate Mate lets you browse Information Security Engineer postings filtered by verified H-1B LCA filing history, so you can prioritize employers with an established track record of sponsoring this specific occupation.
How does the prevailing wage requirement affect Information Security Engineer H-1B petitions?
Before filing an H-1B petition, the employer must obtain a certified Labor Condition Application from DOL confirming the offered salary meets the prevailing wage for the role and location. The OFLC Wage Search publishes wage levels by SOC code and metro area. Your offer must meet at least the Level I wage, and USCIS will reject petitions where the certified wage and offered salary don't match.
Can I transfer my H-1B to a new Information Security Engineer role without losing status?
Yes, under H-1B portability rules you can start working for a new employer once they file an H-1B transfer petition, without waiting for USCIS approval. The new role must still qualify as a specialty occupation in information security. If the job duties shift significantly, such as moving from a hands-on engineering role to a general IT management position, USCIS may scrutinize whether the specialty occupation requirement is still met.
Do security clearances or certifications help an H-1B petition for this role?
They strengthen the petition but don't replace the degree requirement. Certifications like CISSP or CISM and active government clearances support the specialty occupation argument by demonstrating the role demands highly specialized knowledge. USCIS doesn't formally require them, but including them in the I-129 support letter helps establish that the position couldn't be filled by a generalist without targeted credentials.