H-1B Visa Network Security Engineer Jobs
Network Security Engineer roles qualify as H-1B visa specialty occupations under the computer and information systems category, requiring at least a bachelor's degree in a directly related field. Employers in finance, defense contracting, healthcare, and cloud infrastructure sponsor H-1B transfers and new cap-subject filings regularly for this role.
Find H-1B Visa Network Security Engineer JobsOverview
Showing 5 of 54+ Network Security Engineer jobs
See all 54+ Network Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Network Security Engineer roles.
Get Access To All JobsINTRODUCTION
SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.
The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.
Why you’ll love this role:
This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.
ESSENTIAL DUTIES INCLUDE THE FOLLOWING:
- Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
- Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
- Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
- Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
- Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
- Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
- Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
- Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
- Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
- Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
- Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
- Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
- Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
- Participate in the defined on-call rotation and support major technical escalations.
- Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
- Own assigned network security platforms or major subsystems throughout their operational lifecycle.
- Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
- Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
- Support disaster recovery planning and testing for assigned network security platforms and services.
- Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
- Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
- Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
- Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
- Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
- Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
- Perform all other duties as assigned.
MINIMUM QUALIFICATIONS
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
- Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
- Extensive experience designing, implementing, securing, and supporting enterprise network environments.
- Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
- Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
- Strong understanding of enterprise routing concepts, including BGP and OSPF.
- Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
- Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
- Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
- Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
- Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
- Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
- Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
- Working knowledge of security standards and control frameworks applicable to network and cloud security.
- Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
- Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
- Experience working in financial services or another regulated industry is preferred.
SWBC OFFERS:
- Competitive overall compensation package
- Work/Life balance
- Employee engagement activities and recognition awards
- Years of Service awards
- Career enhancement and growth opportunities
- Leadership Academy and Mentor Program
- Continuing education and career certifications
- Variety of healthcare coverage options
- Traditional and Roth 401(k) retirement plans
- Lucrative Wellness Program
Based upon employee eligibility
ADDITIONAL INFORMATION:
SWBC is a Substance-Free Workplace and requires pre-employment drug testing.
Please note, SWBC does not hire tobacco users as allowed by law.
INTRODUCTION
SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.
The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.
Why you’ll love this role:
This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.
ESSENTIAL DUTIES INCLUDE THE FOLLOWING:
- Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
- Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
- Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
- Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
- Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
- Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
- Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
- Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
- Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
- Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
- Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
- Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
- Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
- Participate in the defined on-call rotation and support major technical escalations.
- Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
- Own assigned network security platforms or major subsystems throughout their operational lifecycle.
- Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
- Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
- Support disaster recovery planning and testing for assigned network security platforms and services.
- Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
- Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
- Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
- Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
- Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
- Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
- Perform all other duties as assigned.
MINIMUM QUALIFICATIONS
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
- Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
- Extensive experience designing, implementing, securing, and supporting enterprise network environments.
- Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
- Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
- Strong understanding of enterprise routing concepts, including BGP and OSPF.
- Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
- Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
- Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
- Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
- Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
- Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
- Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
- Working knowledge of security standards and control frameworks applicable to network and cloud security.
- Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
- Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
- Experience working in financial services or another regulated industry is preferred.
SWBC OFFERS:
- Competitive overall compensation package
- Work/Life balance
- Employee engagement activities and recognition awards
- Years of Service awards
- Career enhancement and growth opportunities
- Leadership Academy and Mentor Program
- Continuing education and career certifications
- Variety of healthcare coverage options
- Traditional and Roth 401(k) retirement plans
- Lucrative Wellness Program
Based upon employee eligibility
ADDITIONAL INFORMATION:
SWBC is a Substance-Free Workplace and requires pre-employment drug testing.
Please note, SWBC does not hire tobacco users as allowed by law.
See all 54+ H-1B Visa Network Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Network Security Engineer Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Network Security Engineer
Verify your degree satisfies specialty occupation
USCIS requires your degree field to directly relate to network security. A computer science or cybersecurity degree is clean. An unrelated degree paired with certifications like CISSP or CCNP may trigger an RFE, so document the connection explicitly before filing.
Target employers with active LCA filings
Search DOL's LCA disclosure data for employers who have filed under SOC code 15-1212 for Network and Computer Systems Administrators or 15-1299 for cybersecurity-adjacent titles. Companies with recurring filings in your metro area have established H-1B sponsorship processes and legal infrastructure already in place.
Check employer E-Verify enrollment early
Defense contractors and federal subcontractors are required to use E-Verify, which also makes them eligible STEM OPT employers. Confirming enrollment before your final interview round tells you whether a cap-gap extension or OPT-to-H-1B transition will be straightforward or complicated.
Use Migrate Mate to filter by H-1B filing history
Filter Network Security Engineer roles by employers with verified H-1B LCA filing history on Migrate Mate. This skips companies that claim they sponsor but have no DOL record, saving weeks of back-and-forth with recruiters who can't confirm their own firm's process.
Clarify prevailing wage level before negotiating
Your offered salary must meet the DOL prevailing wage for your job title, experience level, and work location. Run your role and zip code through the OFLC Wage Search before your offer conversation so you know whether a Level I or Level II wage applies and can negotiate within a compliant range.
Confirm who files if you hold a security clearance
Network security roles at defense contractors often require clearances that only U.S. persons can hold, which can complicate or block H-1B sponsorship at that employer entirely. Confirm upfront whether the specific role is restricted before investing time in the interview process.
H-1B Visa Network Security Engineer: Frequently Asked Questions
Does Network Security Engineer qualify as an H-1B specialty occupation?
Yes. Network Security Engineer falls under computer and information systems occupations, which USCIS consistently recognizes as requiring at least a bachelor's degree in a directly related field such as computer science, cybersecurity, or information technology. Roles requiring design of security architectures, threat analysis, or network intrusion response generally satisfy the specialty occupation definition without additional documentation.
Which industries sponsor H-1B visas most for Network Security Engineers?
Financial services, cloud infrastructure companies, healthcare systems, and federal contractors sponsor H-1B Network Security Engineers at high rates. Financial institutions face strict regulatory security requirements and hire internationally trained professionals routinely. Federal contractors are a notable exception: many roles require security clearances restricted to U.S. persons, so confirm clearance eligibility before applying. Browse verified sponsoring employers on Migrate Mate filtered by this role.
Can I transfer my H-1B to a new Network Security Engineer employer?
Yes. H-1B portability under AC21 lets you start working for a new employer as soon as your transfer petition is filed, without waiting for approval, provided your original H-1B has been approved and you've been in valid status. Your new employer must file a new I-129 and a certified LCA at the prevailing wage for your new location before your start date.
How does the H-1B prevailing wage apply to Network Security Engineer roles?
DOL sets four wage levels for each occupation and location combination. Level I applies to entry-level roles with close supervision; Level III and IV cover senior engineers with specialized expertise or leadership responsibilities. Your employer certifies the offered salary meets or exceeds the applicable level on the LCA before filing. Use the OFLC Wage Search to look up current wage levels for your specific metro area and experience tier.
Does holding certifications like CISSP or CCIE help my H-1B petition?
Certifications strengthen the job duties description in your petition and can support an employer's argument that the role requires specialized knowledge, but they don't substitute for a qualifying degree. If your degree field doesn't directly relate to network security, certifications become more important as supplementary evidence. USCIS evaluates the totality of credentials, so your employer's attorney should document how your combination of education, certifications, and experience maps to the role.