H-1B Visa Network Security Specialist Jobs
Network Security Specialist roles qualify as H-1B visa specialty occupations under USCIS guidelines, requiring at least a bachelor's degree in computer science, cybersecurity, or a related field. Employers file the LCA with DOL before petitioning USCIS, and the 85,000-slot annual cap means timing your job search around the April lottery window matters.
Find H-1B Visa Network Security Specialist JobsOverview
Showing 5 of 54+ Network Security Specialist jobs
See all 54+ Network Security Specialist Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Network Security Specialist roles.
Get Access To All JobsINTRODUCTION
SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.
The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.
Why you’ll love this role:
This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.
ESSENTIAL DUTIES INCLUDE THE FOLLOWING:
- Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
- Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
- Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
- Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
- Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
- Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
- Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
- Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
- Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
- Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
- Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
- Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
- Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
- Participate in the defined on-call rotation and support major technical escalations.
- Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
- Own assigned network security platforms or major subsystems throughout their operational lifecycle.
- Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
- Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
- Support disaster recovery planning and testing for assigned network security platforms and services.
- Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
- Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
- Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
- Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
- Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
- Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
- Perform all other duties as assigned.
MINIMUM QUALIFICATIONS
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
- Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
- Extensive experience designing, implementing, securing, and supporting enterprise network environments.
- Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
- Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
- Strong understanding of enterprise routing concepts, including BGP and OSPF.
- Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
- Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
- Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
- Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
- Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
- Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
- Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
- Working knowledge of security standards and control frameworks applicable to network and cloud security.
- Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
- Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
- Experience working in financial services or another regulated industry is preferred.
SWBC OFFERS:
- Competitive overall compensation package
- Work/Life balance
- Employee engagement activities and recognition awards
- Years of Service awards
- Career enhancement and growth opportunities
- Leadership Academy and Mentor Program
- Continuing education and career certifications
- Variety of healthcare coverage options
- Traditional and Roth 401(k) retirement plans
- Lucrative Wellness Program
Based upon employee eligibility
ADDITIONAL INFORMATION:
SWBC is a Substance-Free Workplace and requires pre-employment drug testing.
Please note, SWBC does not hire tobacco users as allowed by law.
INTRODUCTION
SWBC is seeking an experienced Senior Network Security Engineer to design, implement, operate, and improve enterprise network security controls across on-premises, cloud, and hybrid environments. This position owns or supports major network security platforms and capabilities, including firewalls, segmentation, VPNs, secure cloud connectivity, intrusion prevention, and network security telemetry.
The Senior Network Security Engineer collaborates with Network Operations, Cloud Operations, Security Operations, infrastructure, application, and development teams to provide secure and resilient connectivity across the enterprise. The role requires strong hands-on experience with Palo Alto Networks and Cisco firewalls, enterprise routing, AWS and Microsoft Azure networking, production change control, and complex incident resolution.
Why you’ll love this role:
This role is ideal for an experienced network security professional who enjoys solving complex technical challenges and shaping secure, resilient enterprise connectivity. You will have the opportunity to own critical security platforms, influence hybrid-cloud architecture, lead major changes and incident resolution, mentor technical team members, and strengthen security across SWBC’s enterprise environment.
ESSENTIAL DUTIES INCLUDE THE FOLLOWING:
- Design, implement, operate, and improve secure enterprise network architectures across on-premises, cloud, and hybrid environments.
- Deploy, configure, manage, and troubleshoot Palo Alto Networks and Cisco firewalls, including security policies, NAT policies, security zones, objects, application controls, and access-control policies.
- Design and implement network segmentation, micro-segmentation, and isolation controls to reduce attack surfaces and limit lateral movement.
- Perform firewall migrations, upgrades, configuration changes, policy optimization, and complex troubleshooting.
- Develop and maintain network security standards, architecture documentation, network diagrams, implementation procedures, and operational runbooks.
- Design, implement, and troubleshoot remote-access VPN solutions and site-to-site IPsec tunnels, including authentication, encryption, routing, and tunnel connectivity.
- Establish secure connectivity among corporate offices, data centers, cloud environments, remote users, and third-party organizations.
- Design, implement, and troubleshoot enterprise routing architectures, including BGP, OSPF, route redistribution, route filtering, route summarization, and routing policies.
- Apply strong knowledge of TCP/IP, subnetting, VLANs, NAT, DNS, DHCP, network segmentation, high availability, and redundancy.
- Design and implement secure AWS VPC and Microsoft Azure VNet architectures, including subnets, route tables, network security controls, and hybrid connectivity.
- Evaluate cloud network architectures and configurations for security risks, misconfigurations, and control gaps and support cloud transformation initiatives.
- Configure and maintain IDS/IPS, firewall logging, and network security telemetry and coordinate integration into centralized monitoring and incident-response workflows.
- Serve as a senior technical resolver for complex network security incidents and service disruptions and lead or contribute to root-cause analysis and corrective actions.
- Participate in the defined on-call rotation and support major technical escalations.
- Support compliance and audit activities by maintaining controls, producing audit-ready evidence, and coordinating remediation related to PCI DSS, SOC 2, NIST, ISO 27001, and other applicable requirements.
- Own assigned network security platforms or major subsystems throughout their operational lifecycle.
- Plan, sponsor, present, test, validate, implement, and review non-trivial production changes through established change-control processes, including appropriate rollback plans.
- Coordinate remediation of vulnerabilities affecting firewalls, VPN services, network appliances, edge controls, and cloud network infrastructure.
- Support disaster recovery planning and testing for assigned network security platforms and services.
- Use operational metrics to improve service reliability, change quality, vulnerability remediation, and incident resolution.
- Maintain complete and accurate change, incident, problem, vulnerability, and technical evidence records in ServiceNow or other approved systems.
- Collaborate with technical teams, translate security requirements into practical solutions, and provide guidance for network, cloud connectivity, infrastructure, and application architecture decisions.
- Mentor analysts, administrators, and engineers and provide technical guidance during complex changes and incidents.
- Communicate complex technical and security concepts effectively to technical and non-technical stakeholders.
- Support Security Assurance and Governance, Risk, and Compliance activities through technical evidence, control validation, and remediation support.
- Perform all other duties as assigned.
MINIMUM QUALIFICATIONS
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
- Minimum of seven (7) years of experience in network engineering, network security, cloud network security, infrastructure security, or a combination of these areas.
- Extensive experience designing, implementing, securing, and supporting enterprise network environments.
- Extensive hands-on experience with Palo Alto Networks firewalls and hands-on experience with Cisco firewalls, including Cisco ASA or Cisco Secure Firewall/FTD.
- Strong experience with remote-access VPN and site-to-site IPsec VPN technologies.
- Strong understanding of enterprise routing concepts, including BGP and OSPF.
- Hands-on experience with routing, network security, and hybrid connectivity in AWS and Microsoft Azure.
- Strong knowledge of TCP/IP, VLANs, subnetting, NAT, network segmentation, DNS, DHCP, defense-in-depth, and network security architecture.
- Experience implementing production changes through formal change-control processes, including testing, validation, rollback planning, and documentation.
- Demonstrated ability to troubleshoot and resolve complex technical incidents beyond established runbooks and contribute to root-cause analysis, corrective actions, vulnerability remediation, and recurrence reduction.
- Experience creating technical standards, architecture diagrams, implementation procedures, automation, or design documentation.
- Knowledge of IDS/IPS, firewall logging, network security monitoring, SIEM integration, and related telemetry.
- Familiarity with infrastructure-as-code and automation technologies such as Terraform, CloudFormation, Ansible, Python, or PowerShell.
- Working knowledge of security standards and control frameworks applicable to network and cloud security.
- Strong analytical, troubleshooting, documentation, problem-solving, written communication, and verbal communication skills.
- Ability to work independently and collaboratively in a fast-paced, evolving environment and participate in defined on-call responsibilities as a senior technical resolver.
- Current Cisco CCNP, preferably CCNP Enterprise or an equivalent certification, or Palo Alto Networks Certified Network Security Engineer (PCNSE) certification.
- AWS Certified Advanced Networking – Specialty, AWS Certified Solutions Architect – Professional, a relevant Microsoft Azure network or security certification, CISSP, or an equivalent advanced security certification is preferred.
- Experience working in financial services or another regulated industry is preferred.
SWBC OFFERS:
- Competitive overall compensation package
- Work/Life balance
- Employee engagement activities and recognition awards
- Years of Service awards
- Career enhancement and growth opportunities
- Leadership Academy and Mentor Program
- Continuing education and career certifications
- Variety of healthcare coverage options
- Traditional and Roth 401(k) retirement plans
- Lucrative Wellness Program
Based upon employee eligibility
ADDITIONAL INFORMATION:
SWBC is a Substance-Free Workplace and requires pre-employment drug testing.
Please note, SWBC does not hire tobacco users as allowed by law.
See all 54+ H-1B Visa Network Security Specialist Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Network Security Specialist Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as a Network Security Specialist
Map your credentials to SOC codes
Network Security Specialists typically fall under SOC 15-1212. Confirm your degree and experience align with that classification before applying, because mismatches between your credentials and the employer's LCA job description are a common source of RFEs.
Check employer LCA filings before applying
Use Migrate Mate to filter Network Security Specialist roles by verified LCA filing history. Employers with active DOL certifications for this title have already cleared the prevailing wage step, which shortens your path to an approved petition.
Verify prevailing wage levels using OFLC Wage Search
Before negotiating an offer, look up the Level I through Level IV wage bands for your metro area using OFLC Wage Search. Your offered salary must meet or exceed the certified wage on the LCA, and a shortfall can invalidate the petition.
Target employers enrolled in E-Verify
STEM-adjacent roles in defense contracting, cloud infrastructure, and financial services often require E-Verify enrollment by federal contract rules. These employers run structured HR processes and are generally more experienced with H-1B filings than smaller firms.
Request premium processing before cap-gap expires
If you're transitioning from F-1 OPT and your EAD expires before October 1, ask your employer to file Form I-907 for premium processing. USCIS targets a 15-business-day adjudication, which reduces the gap between OPT expiry and H-1B activation.
Document security clearance eligibility separately from visa status
Some Network Security Specialist roles require a clearance, which is granted by a federal agency, not USCIS. Clarify clearance eligibility with your prospective employer before the offer stage, because a visa-dependent candidate's clearance timeline differs from a U.S. citizen's.
H-1B Visa Network Security Specialist: Frequently Asked Questions
Does a Network Security Specialist role qualify as an H-1B specialty occupation?
Yes. USCIS considers Network Security Specialist positions specialty occupations when the role requires at least a bachelor's degree in computer science, information security, or a closely related field. Roles centered on threat analysis, vulnerability management, or security architecture consistently meet that threshold. Employers document the degree requirement in the LCA and I-129 petition to support the specialty occupation classification.
Which employers sponsor H-1B visas for Network Security Specialist positions?
Federal contractors, large financial institutions, cloud providers, and managed security service providers are among the most active H-1B sponsors for this role. You can browse verified employers with LCA filing history for Network Security Specialist positions on Migrate Mate, which filters listings by DOL Labor Condition Application data so you're only seeing companies that have actively sponsored this job title.
Does a security clearance affect my H-1B sponsorship eligibility?
H-1B status and security clearance eligibility are determined by separate agencies. USCIS adjudicates the visa petition independently of any clearance investigation. Many Network Security Specialist roles in government contracting require a clearance, and some positions are restricted to U.S. citizens or lawful permanent residents. Confirm the clearance requirement before accepting an offer to avoid late-stage disqualification.
Can my employer sponsor me for H-1B if I'm currently on OPT doing network security work?
Yes, and this is one of the most common paths. Your employer files the H-1B petition during the April cap registration window. If selected, your status typically transitions to H-1B on October 1. If your OPT EAD expires before then, cap-gap rules extend your authorization automatically while the petition is pending, provided you remain employed with the same sponsoring employer.
What does the DOL prevailing wage requirement mean for my Network Security Specialist offer?
Before filing your H-1B petition, your employer submits an LCA to DOL certifying that your offered salary meets the prevailing wage for your job title and work location. The wage level, from Level I to Level IV, reflects your experience and responsibilities. If your offer falls below the certified wage, DOL can reject the LCA and block the petition entirely, so confirm the wage level matches your role before signing.