H-1B Visa Infrastructure Security Engineer Jobs
Infrastructure Security Engineer roles qualify for H-1B visa sponsorship as specialty occupations requiring at least a bachelor's degree in computer science, information security, or a related field. Employers filing LCAs with DOL must certify they're paying the prevailing wage for your specific location and job level, which directly affects your offer negotiation.
Find H-1B Visa Infrastructure Security Engineer JobsOverview
Showing 5 of 77+ Infrastructure Security Engineer jobs
See all 77+ Infrastructure Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Infrastructure Security Engineer roles.
Get Access To All JobsINTRODUCTION
Hayward Holdings Inc. (NYSE "HAYW") is one of the leading manufacturers of residential swimming pool equipment in the world, with a significant presence in the commercial pool market that is continuously growing. Hayward designs, manufactures, and markets a full line of residential and commercial pool and spa equipment including pumps, filters, heating, cleaners, salt chlorinators, automation, lighting, safety, flow control and energy solutions at our company owned facilities. Headquartered in Charlotte, North Carolina, Hayward also has facilities in Tennessee, Arizona, and Rhode Island, Georgia, as well as Canada, Spain, France, Australia, and China.
Position Summary
The Vice President, Information Security & Infrastructure is the enterprise executive responsible for defining and leading the company's global cybersecurity, technology infrastructure, cloud, end-user technology, and data protection strategy. This leader establishes the vision, operating model, architecture, policies, standards, and governance needed to protect company information assets while delivering secure, reliable, scalable, and cost-effective technology services that enable business growth, operations, and innovation.
The VP will lead security across Hayward’s entire technology ecosystem, including Operational Technology (OT), Industrial Control Systems (ICS), IoT, manufacturing environments, and connected products, driving a unified approach to cyber risk, resilience, and security governance.
This leader advises executive leadership and the Board of Directors on the company's cyber risk, posture and resilience; leads enterprise-wide security controls, threat protection, identity and access management, security awareness, vendor risk, incident preparedness, disaster recovery, and business continuity; ensures the organization can demonstrate compliance with applicable regulations, public-company controls, and recognized industry standards; and drives infrastructure, cloud services, network services, and end-user computing and support.
The role is accountable for the security, availability, performance, and operational effectiveness of Hayward's technology environment and end-user experience.
Responsibilities:
Enterprise Security Strategy & Executive Leadership
- Define and execute the global information security strategy, multi-year roadmap, operating model, and investment priorities aligned with business goals and risk appetite.
- Serve as the senior enterprise advisor on cybersecurity risk, presenting clear recommendations, performance indicators, emerging threats, and material exposures to executive leadership and the Board of Directors.
- Integrate security into enterprise technology strategy, digital products, business transformation, mergers and acquisitions, and global operations.
- Balance risk mitigation with innovation, customer experience, operational effectiveness, and competitive advantage.
- Establish enterprise accountability, decision rights, and governance forums for cybersecurity and information risk.
Security Architecture, Engineering & Operations
- Lead the development of technical security architecture specifications, standards, and patterns across business environments, infrastructure, cloud, web, application, and digital platforms.
- Oversee global capabilities for security monitoring, threat detection, vulnerability management, penetration testing, endpoint and network protection, security event correlation, and incident response.
- Ensure the confidentiality, integrity, and availability of information assets through effective preventive, detective, and corrective controls.
- Drive secure-by-design practices across technology delivery, software development, infrastructure, and product development.
- Guide evaluation and implementation of security technologies, including firewalls, VPN, Security Information and Event Management platforms, identity solutions, and cloud security controls.
Cyber Risk, Governance & Compliance
- Build and lead an enterprise information security assurance program with annual and long-term goals, risk strategies, governance processes, metrics, and reporting mechanisms.
- Own the strategy for security audits, compliance reviews, and external assessments, including Sarbanes-Oxley controls, General Data Protection Regulation, California Consumer Privacy Act, and other applicable requirements.
- Oversee security policies, standards, procedures, control frameworks, exception management, and remediation governance.
- Lead enterprise cybersecurity risk assessments and ensure material risks are communicated to the appropriate executive, business, and Board audiences.
- Align the security program with recognized frameworks such as NIST, ISO 2700x, ITIL, COBIT, and relevant network defense methodologies.
Incident Preparedness, Resilience & Business Continuity
- Provide executive oversight of cybersecurity incident preparedness, response, escalation, crisis communications, recovery, and post-incident improvement.
- Lead the enterprise approach to disaster recovery and business continuity for critical processes and systems.
- Ensure Recovery Point Objectives and Recovery Time Objectives are defined, tested, achievable, and aligned with business requirements.
- Drive scenario planning, tabletop exercises, recovery testing, and coordinated response practices across technology and business functions.
- Ensure resilience investments are prioritized based on criticality, business impact, and enterprise risk.
Identity, Access & Data Protection
- Define and lead the enterprise Identity and Access Management strategy with emphasis on scalability, resilience, appropriate access, and strong end-user experience.
- Oversee privileged access, authentication, authorization, access governance, and lifecycle controls.
- Partner with Legal, Privacy, Internal Audit, Technology, and business leaders to protect sensitive data and support applicable privacy obligations.
- Ensure external access, data movement, and critical information assets are governed by appropriate controls and monitoring.
Security Awareness & Culture
- Champion a global security culture in which employees understand and act on their responsibility to protect company information and systems.
- Direct an enterprise security awareness program addressing phishing, social engineering, acceptable use, policy expectations, and emerging threats.
- Use metrics, simulations, and risk trends to improve program effectiveness and reduce human-related security exposure.
- Engage senior leaders to reinforce security accountability within their functions and teams.
Third-Party & Vendor Risk Management
- Provide executive ownership of the company's information security vendor risk management program.
- Ensure initial and periodic risk assessments address information security standards, service-level commitments, recovery expectations, and policy compliance.
- Oversee security expectations for third parties, staff augmentation providers, strategic technology partners, and externally hosted services.
- Partner with Procurement, Legal, Finance, Internal Audit, and business leaders on risk-based vendor decisions and remediation.
Financial Stewardship & Business Management
- Develop and manage information security capital and operating budgets, forecasts, business cases, and investment roadmaps.
- Prioritize investments based on enterprise risk reduction, regulatory obligations, business enablement, and operational resilience.
- Negotiate and administer strategic security service agreements and vendor contracts.
- Establish executive dashboards that demonstrate performance, control effectiveness, risk reduction, investment outcomes, and program maturity.
Global Infrastructure & Cloud Services
- Define and execute the global infrastructure and cloud strategy, architecture, standards, roadmaps, and investment priorities.
- Lead secure, reliable, and scalable on-premises, cloud, network, compute, storage, and core infrastructure services.
- Drive infrastructure modernization, cloud adoption, lifecycle management, automation, standardization, and technical debt reduction.
- Establish performance, availability, capacity, resilience, and service-level expectations for critical infrastructure platforms.
- Optimize infrastructure cost, performance, and vendor partnerships while ensuring alignment with enterprise architecture, cybersecurity, and business requirements.
End-User Technology & Support
- Define and lead the global end-user technology and support strategy, ensuring a consistent, secure, and productive employee technology experience.
- Oversee workplace technology services, including end-user devices, collaboration tools, software distribution, mobility, service desk, and field/site support.
- Establish service-management standards, SLAs, performance metrics, and continuous improvement practices across end-user support.
- Drive device and workplace technology standardization, lifecycle management, automation, and self-service capabilities.
- Partner with business and technology leaders to improve employee experience, service quality, support effectiveness, and technology adoption.
Organization & Talent Leadership
- Build and lead a high-performing global information security organization that protects company assets while preserving innovation, agility, and competitive advantage.
- Lead internal security personnel and technical resources, including third-party, vendor, and staff augmentation relationships.
- Develop the leadership team, succession pipeline, operating capabilities, and technical depth of the function.
- Establish clear performance expectations and foster collaboration, accountability, inclusion, continuous learning, and sound risk judgment.
Qualifications
Education
- Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related field required.
- Master's degree in Technology, Business Administration, or a related discipline preferred.
Experience
- 15+ years of progressive information security, cybersecurity, technology risk, compliance, or related experience, including substantial leadership responsibility in complex, global environments.
- 10+ years leading people, leaders, and multidisciplinary security teams; experience building and scaling a high-performing information security organization.
- Demonstrated success managing cyber risk, compliance, and resilience for a public company or comparably regulated enterprise.
- Experience advising executive leadership and presenting complex cyber risk matters to Boards of Directors or Board committees.
- Experience developing and managing significant operating and capital budgets, strategic vendors, and enterprise security investments.
Preferred Certifications
- Certified Information Systems Security Professional (CISSP).
- Certified Information Security Manager (CISM).
- Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or equivalent credentials.
INTRODUCTION
Hayward Holdings Inc. (NYSE "HAYW") is one of the leading manufacturers of residential swimming pool equipment in the world, with a significant presence in the commercial pool market that is continuously growing. Hayward designs, manufactures, and markets a full line of residential and commercial pool and spa equipment including pumps, filters, heating, cleaners, salt chlorinators, automation, lighting, safety, flow control and energy solutions at our company owned facilities. Headquartered in Charlotte, North Carolina, Hayward also has facilities in Tennessee, Arizona, and Rhode Island, Georgia, as well as Canada, Spain, France, Australia, and China.
Position Summary
The Vice President, Information Security & Infrastructure is the enterprise executive responsible for defining and leading the company's global cybersecurity, technology infrastructure, cloud, end-user technology, and data protection strategy. This leader establishes the vision, operating model, architecture, policies, standards, and governance needed to protect company information assets while delivering secure, reliable, scalable, and cost-effective technology services that enable business growth, operations, and innovation.
The VP will lead security across Hayward’s entire technology ecosystem, including Operational Technology (OT), Industrial Control Systems (ICS), IoT, manufacturing environments, and connected products, driving a unified approach to cyber risk, resilience, and security governance.
This leader advises executive leadership and the Board of Directors on the company's cyber risk, posture and resilience; leads enterprise-wide security controls, threat protection, identity and access management, security awareness, vendor risk, incident preparedness, disaster recovery, and business continuity; ensures the organization can demonstrate compliance with applicable regulations, public-company controls, and recognized industry standards; and drives infrastructure, cloud services, network services, and end-user computing and support.
The role is accountable for the security, availability, performance, and operational effectiveness of Hayward's technology environment and end-user experience.
Responsibilities:
Enterprise Security Strategy & Executive Leadership
- Define and execute the global information security strategy, multi-year roadmap, operating model, and investment priorities aligned with business goals and risk appetite.
- Serve as the senior enterprise advisor on cybersecurity risk, presenting clear recommendations, performance indicators, emerging threats, and material exposures to executive leadership and the Board of Directors.
- Integrate security into enterprise technology strategy, digital products, business transformation, mergers and acquisitions, and global operations.
- Balance risk mitigation with innovation, customer experience, operational effectiveness, and competitive advantage.
- Establish enterprise accountability, decision rights, and governance forums for cybersecurity and information risk.
Security Architecture, Engineering & Operations
- Lead the development of technical security architecture specifications, standards, and patterns across business environments, infrastructure, cloud, web, application, and digital platforms.
- Oversee global capabilities for security monitoring, threat detection, vulnerability management, penetration testing, endpoint and network protection, security event correlation, and incident response.
- Ensure the confidentiality, integrity, and availability of information assets through effective preventive, detective, and corrective controls.
- Drive secure-by-design practices across technology delivery, software development, infrastructure, and product development.
- Guide evaluation and implementation of security technologies, including firewalls, VPN, Security Information and Event Management platforms, identity solutions, and cloud security controls.
Cyber Risk, Governance & Compliance
- Build and lead an enterprise information security assurance program with annual and long-term goals, risk strategies, governance processes, metrics, and reporting mechanisms.
- Own the strategy for security audits, compliance reviews, and external assessments, including Sarbanes-Oxley controls, General Data Protection Regulation, California Consumer Privacy Act, and other applicable requirements.
- Oversee security policies, standards, procedures, control frameworks, exception management, and remediation governance.
- Lead enterprise cybersecurity risk assessments and ensure material risks are communicated to the appropriate executive, business, and Board audiences.
- Align the security program with recognized frameworks such as NIST, ISO 2700x, ITIL, COBIT, and relevant network defense methodologies.
Incident Preparedness, Resilience & Business Continuity
- Provide executive oversight of cybersecurity incident preparedness, response, escalation, crisis communications, recovery, and post-incident improvement.
- Lead the enterprise approach to disaster recovery and business continuity for critical processes and systems.
- Ensure Recovery Point Objectives and Recovery Time Objectives are defined, tested, achievable, and aligned with business requirements.
- Drive scenario planning, tabletop exercises, recovery testing, and coordinated response practices across technology and business functions.
- Ensure resilience investments are prioritized based on criticality, business impact, and enterprise risk.
Identity, Access & Data Protection
- Define and lead the enterprise Identity and Access Management strategy with emphasis on scalability, resilience, appropriate access, and strong end-user experience.
- Oversee privileged access, authentication, authorization, access governance, and lifecycle controls.
- Partner with Legal, Privacy, Internal Audit, Technology, and business leaders to protect sensitive data and support applicable privacy obligations.
- Ensure external access, data movement, and critical information assets are governed by appropriate controls and monitoring.
Security Awareness & Culture
- Champion a global security culture in which employees understand and act on their responsibility to protect company information and systems.
- Direct an enterprise security awareness program addressing phishing, social engineering, acceptable use, policy expectations, and emerging threats.
- Use metrics, simulations, and risk trends to improve program effectiveness and reduce human-related security exposure.
- Engage senior leaders to reinforce security accountability within their functions and teams.
Third-Party & Vendor Risk Management
- Provide executive ownership of the company's information security vendor risk management program.
- Ensure initial and periodic risk assessments address information security standards, service-level commitments, recovery expectations, and policy compliance.
- Oversee security expectations for third parties, staff augmentation providers, strategic technology partners, and externally hosted services.
- Partner with Procurement, Legal, Finance, Internal Audit, and business leaders on risk-based vendor decisions and remediation.
Financial Stewardship & Business Management
- Develop and manage information security capital and operating budgets, forecasts, business cases, and investment roadmaps.
- Prioritize investments based on enterprise risk reduction, regulatory obligations, business enablement, and operational resilience.
- Negotiate and administer strategic security service agreements and vendor contracts.
- Establish executive dashboards that demonstrate performance, control effectiveness, risk reduction, investment outcomes, and program maturity.
Global Infrastructure & Cloud Services
- Define and execute the global infrastructure and cloud strategy, architecture, standards, roadmaps, and investment priorities.
- Lead secure, reliable, and scalable on-premises, cloud, network, compute, storage, and core infrastructure services.
- Drive infrastructure modernization, cloud adoption, lifecycle management, automation, standardization, and technical debt reduction.
- Establish performance, availability, capacity, resilience, and service-level expectations for critical infrastructure platforms.
- Optimize infrastructure cost, performance, and vendor partnerships while ensuring alignment with enterprise architecture, cybersecurity, and business requirements.
End-User Technology & Support
- Define and lead the global end-user technology and support strategy, ensuring a consistent, secure, and productive employee technology experience.
- Oversee workplace technology services, including end-user devices, collaboration tools, software distribution, mobility, service desk, and field/site support.
- Establish service-management standards, SLAs, performance metrics, and continuous improvement practices across end-user support.
- Drive device and workplace technology standardization, lifecycle management, automation, and self-service capabilities.
- Partner with business and technology leaders to improve employee experience, service quality, support effectiveness, and technology adoption.
Organization & Talent Leadership
- Build and lead a high-performing global information security organization that protects company assets while preserving innovation, agility, and competitive advantage.
- Lead internal security personnel and technical resources, including third-party, vendor, and staff augmentation relationships.
- Develop the leadership team, succession pipeline, operating capabilities, and technical depth of the function.
- Establish clear performance expectations and foster collaboration, accountability, inclusion, continuous learning, and sound risk judgment.
Qualifications
Education
- Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related field required.
- Master's degree in Technology, Business Administration, or a related discipline preferred.
Experience
- 15+ years of progressive information security, cybersecurity, technology risk, compliance, or related experience, including substantial leadership responsibility in complex, global environments.
- 10+ years leading people, leaders, and multidisciplinary security teams; experience building and scaling a high-performing information security organization.
- Demonstrated success managing cyber risk, compliance, and resilience for a public company or comparably regulated enterprise.
- Experience advising executive leadership and presenting complex cyber risk matters to Boards of Directors or Board committees.
- Experience developing and managing significant operating and capital budgets, strategic vendors, and enterprise security investments.
Preferred Certifications
- Certified Information Systems Security Professional (CISSP).
- Certified Information Security Manager (CISM).
- Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA), or equivalent credentials.
See all 77+ H-1B Visa Infrastructure Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Infrastructure Security Engineer Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as an Infrastructure Security Engineer
Verify your credentials match specialty occupation standards
USCIS requires your degree to directly relate to infrastructure security work. A degree in computer science, cybersecurity, or electrical engineering strengthens your petition. Unrelated degrees paired with security certifications like CISSP or CISM can still qualify but require stronger documentation.
Target employers with active LCA filing history
Use Migrate Mate to filter Infrastructure Security Engineer roles by employers who have filed LCAs for this occupation code. DOL disclosure data shows which companies sponsor consistently, so you're not guessing about sponsorship willingness before applying.
Check prevailing wage levels before accepting an offer
Run your target job title, location, and experience level through the OFLC Wage Search before negotiating. Your offered salary must meet the DOL wage level tied to your role. A Level I wage for a senior security engineer role can trigger an RFE.
Prioritize cap-exempt employers for faster timelines
Universities, nonprofit research institutions, and government-affiliated entities are cap-exempt and can file H-1B petitions year-round without the lottery. Infrastructure security roles exist at many of these organizations, and you'd start work within weeks of approval rather than waiting until October 1.
Confirm your employer uses E-Verify before the offer stage
STEM OPT extensions require your employer to be enrolled in E-Verify. If you're transitioning from OPT to H-1B, confirming E-Verify enrollment early prevents gaps in your authorization timeline if the lottery selection is delayed.
Document security clearance history for petition support
If you hold or have held a U.S. security clearance, include documentation in your H-1B petition package. Clearance eligibility signals employer investment and supports the specialty occupation argument, particularly for roles involving classified infrastructure or government contractor environments.
H-1B Visa Infrastructure Security Engineer: Frequently Asked Questions
Does an Infrastructure Security Engineer role qualify as a specialty occupation for H-1B purposes?
Yes. Infrastructure Security Engineer roles typically qualify because they require theoretical and practical application of highly specialized knowledge, and a bachelor's degree or higher in a directly related field like computer science, cybersecurity, or information systems is a standard entry requirement. USCIS evaluates the specific job duties and degree requirement stated in the LCA and petition, so your employer's job description needs to reflect genuine technical specialization, not generalist IT work.
Which employers are most likely to sponsor H-1B visas for infrastructure security roles?
Large technology companies, defense contractors, financial institutions, healthcare systems, and cloud infrastructure providers consistently file H-1B LCAs for security engineering roles. Cap-exempt employers like research universities and nonprofit hospitals are also strong options since they can sponsor outside the lottery window. Browse Infrastructure Security Engineer roles filtered by sponsorship history on Migrate Mate to see which companies have active LCA filings for this occupation.
How does the H-1B lottery affect Infrastructure Security Engineers specifically?
The annual H-1B cap of 65,000 regular slots and 20,000 U.S. master's exemption slots applies to most private-sector employers. If you hold a U.S. master's degree in a relevant field, you get two chances in the lottery, which statistically improves selection odds. Targeting cap-exempt employers, like universities or nonprofit research organizations with infrastructure security teams, eliminates lottery risk entirely.
Can a security clearance affect my H-1B petition for an infrastructure security role?
A clearance doesn't directly influence USCIS adjudication of the H-1B petition, but it affects the underlying job offer. Roles requiring an active clearance may limit the employer's ability to transfer sponsorship to a foreign national who isn't yet eligible, since clearance adjudication takes time. Confirm with your employer whether the role requires a clearance to start or only to advance, and get that distinction in writing before signing.
What happens to my H-1B status if I'm laid off from an infrastructure security role?
You have a 60-day grace period after your employment ends to find a new H-1B sponsor, transfer your petition, or change to another nonimmigrant status. During this window you can't work, but the clock starts from your last day of employment. If you're actively job searching, filing an H-1B transfer with a new employer during the grace period maintains your lawful status. USCIS requires the new petition to be filed before the 60 days expire.