OPT IT Engineer Jobs
IT Engineer jobs are among the most OPT-friendly roles in the U.S. job market. Employers across tech, finance, and healthcare regularly sponsor F-1 students, and the 24-month STEM OPT extension applies to most IT engineering positions. Strong demand means shorter hiring timelines than many other fields.
Find OPT IT Engineer JobsOverview
Showing 5 of 2,606+ IT Engineer jobs
See all 2,606+ IT Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new IT Engineer roles.
Get Access To All JobsINTRODUCTION
Ann & Robert H. Lurie Children’s Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design. As the largest pediatric provider in the region with a 140-year legacy of excellence, kids and their families are at the center of all we do. Ann & Robert H. Lurie Children’s Hospital of Chicago is ranked in all 10 specialties by the U.S. News & World Report.
LOCATION
680 Lake Shore Drive
JOB DESCRIPTION
The Application Security Engineer is a hands-on technical role responsible for implementing, validating, and maintaining security controls across all tiers of the hospital’s application stack, including database, middleware, web server, API, and presentation layers. The engineer ensures applications, integrations, and supporting components are securely configured, monitored, and aligned with enterprise security standards.
This role works directly with infrastructure, vulnerability management, and vendors to identify, remediate, and prevent application-layer risks. The engineer performs hands-on validation, troubleshooting, and configuration enforcement to ensure secure-by-default application deployments across the enterprise.
ESSENTIAL JOB FUNCTIONS:
- Serve as the central authority for application and integration risk by applying consistent security standards across a portfolio of more than 250 commercial and third-party applications.
- Identify and reduce application-layer risk across third-party applications, APIs, system integrations, automated file transfers, and service accounts.
- Interface with application vendors, application owners, and other departments as needed.
- Assess and secure internet-facing applications by identifying exposed access points and prioritizing remediation of high-risk entry vectors.
- Enforce standardized security controls for authentication, authorization, credential and secret management, encryption, and secure communication patterns.
- Partner with application owners and vendors to eliminate insecure configurations, excessive access, credential misuse, and other security issues.
- Evaluate and secure applications throughout their lifecycle including procurement, implementation, integration, and ongoing operations.
- Support third-party risk management by assessing vendor integrations, data flow methods, and exposure points.
- Drive remediation of application vulnerabilities identified through vulnerability scanning (e.g., Qualys), configuration reviews, and security testing of externally facing systems.
- Improve visibility and governance over application security posture by tracking exposure trends, risk reduction, and remediation progress.
KNOWLEDGE, SKILLS AND ABILITIES:
- Strong understanding of application-layer attack paths including credential compromise, integration abuse, API exploitation, and external exposure risks.
- Deep knowledge of authentication and authorization models such as SSO, OAuth, service accounts, and secure integration patterns.
- Expertise in encryption and data protection across application and integration workflows.
- Experience in complex enterprise environments with large commercial application portfolios.
- Strong familiarity with OWASP Top 10, common exploitation techniques, IAM concepts, and secrets/credential lifecycle management.
- Knowledge of CIS Controls and Benchmarks as they apply to application security.
- Experience with vulnerability scanning and testing tools such as Qualys, Qualys WAS, Metasploit, SAST/DAST, and configuration/exposure analysis tools.
- Understanding of network and edge security including WAFs, firewalls, segmentation, and internet-facing exposure.
- Ability to drive cross-functional remediation across technical and non-technical stakeholders.
- Strong analytical and prioritization skills in a risk-based environment.
- Excellent communication skills with the ability to translate technical risk into business impact.
EDUCATION AND EXPERIENCE
- Bachelor’s Degree in Computer Science, Information Security, Information Systems, or related field, or equivalent work experience.
- 3–7+ years of experience in application security, cybersecurity, or enterprise application support.
- Experience working in large enterprise environments with multiple commercial applications and integrations preferred.
- Experience within a healthcare provider environment is desirable.
- Security certifications such as CISSP, CSSLP, GWAPT, CASE, CEH, OSCP or equivalent are beneficial but not required.
Education
Bachelor's Degree
PAY RANGE
$93,600.00-$154,440.00 Salary
At Lurie Children’s, we are committed to competitive and fair compensation aligned with market rates and internal equity, reflecting individual contributions, experience, and expertise. The pay range for this job indicates minimum and maximum targets for the position. Ranges are regularly reviewed to stay aligned with market conditions. In addition to base salary, Lurie Children’s offers a comprehensive rewards package that may include differentials for some hourly employees, leadership incentives for select roles, health and retirement benefits, and wellbeing programs. For more details on other compensation, consult your recruiter or click the following link to learn more about our benefits.
BENEFIT STATEMENT
For full time and part time employees who work 20 or more hours per week we offer a generous benefits package that includes:
- Medical, dental and vision insurance
- Employer paid group term life and disability
- Employer contribution toward Health Savings Account
- Flexible Spending Accounts
- Paid Time Off (PTO), Paid Holidays and Paid Parental Leave
- 403(b) with a 5% employer match
Various voluntary benefits:
- Supplemental Life, AD and Disability
- Critical Illness, Accident and Hospital Indemnity coverage
- Tuition assistance
- Student loan servicing and support
- Adoption benefits
- Backup Childcare and Eldercare
- Employee Assistance Program, and other specialized behavioral health services and resources for employees and family members
- Discount on services at Lurie Children’s facilities
- Discount purchasing program
THERE’S A PLACE FOR YOU WITH US
At Ann & Robert H. Lurie Children’s Hospital of Chicago and its affiliates (collectively “Lurie Children’s”), we embrace and celebrate diversity and equity in a serious way. We are committed to building a team with a variety of backgrounds, skills, and viewpoints — recognizing that diverse identities strengthen our workplace and the care we can provide to the Chicago community and beyond. We treat everyone fairly, appreciate differences, and make meaningful connections that foster belonging and allyship. This is a place where you can be your best, so we can give our best to the patients and families who trust us with their care.
Lurie Children’s and its affiliates are equal employment opportunity employers. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin, ancestry, age, disability, marital status, pregnancy, protected veteran status, order of protection status, protected genetic information, or any other characteristic protected by law.
For questions about how to request an accommodation please contact: employeehealth@luriechildrens.org
AI NOTICE
Lurie Children’s utilizes certain AI-enabled features within our recruiting platform to support candidate engagement and assist recruiters in identifying and prioritizing applicants whose experience aligns with job requirements. All employment decisions are made by individuals.
It is a civil rights violation with respect to recruitment, hiring, promotion, or employment for an employer to use artificial intelligence that has the effect of subjecting employees to discrimination on the basis of protected classes under the Illinois Human Rights Act or to use zip codes as a proxy for protected classes.
For questions about the use of artificial intelligence in this process or any additional support, please contact: peoplequestions@luriechildrens.org
INTRODUCTION
Ann & Robert H. Lurie Children’s Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design. As the largest pediatric provider in the region with a 140-year legacy of excellence, kids and their families are at the center of all we do. Ann & Robert H. Lurie Children’s Hospital of Chicago is ranked in all 10 specialties by the U.S. News & World Report.
LOCATION
680 Lake Shore Drive
JOB DESCRIPTION
The Application Security Engineer is a hands-on technical role responsible for implementing, validating, and maintaining security controls across all tiers of the hospital’s application stack, including database, middleware, web server, API, and presentation layers. The engineer ensures applications, integrations, and supporting components are securely configured, monitored, and aligned with enterprise security standards.
This role works directly with infrastructure, vulnerability management, and vendors to identify, remediate, and prevent application-layer risks. The engineer performs hands-on validation, troubleshooting, and configuration enforcement to ensure secure-by-default application deployments across the enterprise.
ESSENTIAL JOB FUNCTIONS:
- Serve as the central authority for application and integration risk by applying consistent security standards across a portfolio of more than 250 commercial and third-party applications.
- Identify and reduce application-layer risk across third-party applications, APIs, system integrations, automated file transfers, and service accounts.
- Interface with application vendors, application owners, and other departments as needed.
- Assess and secure internet-facing applications by identifying exposed access points and prioritizing remediation of high-risk entry vectors.
- Enforce standardized security controls for authentication, authorization, credential and secret management, encryption, and secure communication patterns.
- Partner with application owners and vendors to eliminate insecure configurations, excessive access, credential misuse, and other security issues.
- Evaluate and secure applications throughout their lifecycle including procurement, implementation, integration, and ongoing operations.
- Support third-party risk management by assessing vendor integrations, data flow methods, and exposure points.
- Drive remediation of application vulnerabilities identified through vulnerability scanning (e.g., Qualys), configuration reviews, and security testing of externally facing systems.
- Improve visibility and governance over application security posture by tracking exposure trends, risk reduction, and remediation progress.
KNOWLEDGE, SKILLS AND ABILITIES:
- Strong understanding of application-layer attack paths including credential compromise, integration abuse, API exploitation, and external exposure risks.
- Deep knowledge of authentication and authorization models such as SSO, OAuth, service accounts, and secure integration patterns.
- Expertise in encryption and data protection across application and integration workflows.
- Experience in complex enterprise environments with large commercial application portfolios.
- Strong familiarity with OWASP Top 10, common exploitation techniques, IAM concepts, and secrets/credential lifecycle management.
- Knowledge of CIS Controls and Benchmarks as they apply to application security.
- Experience with vulnerability scanning and testing tools such as Qualys, Qualys WAS, Metasploit, SAST/DAST, and configuration/exposure analysis tools.
- Understanding of network and edge security including WAFs, firewalls, segmentation, and internet-facing exposure.
- Ability to drive cross-functional remediation across technical and non-technical stakeholders.
- Strong analytical and prioritization skills in a risk-based environment.
- Excellent communication skills with the ability to translate technical risk into business impact.
EDUCATION AND EXPERIENCE
- Bachelor’s Degree in Computer Science, Information Security, Information Systems, or related field, or equivalent work experience.
- 3–7+ years of experience in application security, cybersecurity, or enterprise application support.
- Experience working in large enterprise environments with multiple commercial applications and integrations preferred.
- Experience within a healthcare provider environment is desirable.
- Security certifications such as CISSP, CSSLP, GWAPT, CASE, CEH, OSCP or equivalent are beneficial but not required.
Education
Bachelor's Degree
PAY RANGE
$93,600.00-$154,440.00 Salary
At Lurie Children’s, we are committed to competitive and fair compensation aligned with market rates and internal equity, reflecting individual contributions, experience, and expertise. The pay range for this job indicates minimum and maximum targets for the position. Ranges are regularly reviewed to stay aligned with market conditions. In addition to base salary, Lurie Children’s offers a comprehensive rewards package that may include differentials for some hourly employees, leadership incentives for select roles, health and retirement benefits, and wellbeing programs. For more details on other compensation, consult your recruiter or click the following link to learn more about our benefits.
BENEFIT STATEMENT
For full time and part time employees who work 20 or more hours per week we offer a generous benefits package that includes:
- Medical, dental and vision insurance
- Employer paid group term life and disability
- Employer contribution toward Health Savings Account
- Flexible Spending Accounts
- Paid Time Off (PTO), Paid Holidays and Paid Parental Leave
- 403(b) with a 5% employer match
Various voluntary benefits:
- Supplemental Life, AD and Disability
- Critical Illness, Accident and Hospital Indemnity coverage
- Tuition assistance
- Student loan servicing and support
- Adoption benefits
- Backup Childcare and Eldercare
- Employee Assistance Program, and other specialized behavioral health services and resources for employees and family members
- Discount on services at Lurie Children’s facilities
- Discount purchasing program
THERE’S A PLACE FOR YOU WITH US
At Ann & Robert H. Lurie Children’s Hospital of Chicago and its affiliates (collectively “Lurie Children’s”), we embrace and celebrate diversity and equity in a serious way. We are committed to building a team with a variety of backgrounds, skills, and viewpoints — recognizing that diverse identities strengthen our workplace and the care we can provide to the Chicago community and beyond. We treat everyone fairly, appreciate differences, and make meaningful connections that foster belonging and allyship. This is a place where you can be your best, so we can give our best to the patients and families who trust us with their care.
Lurie Children’s and its affiliates are equal employment opportunity employers. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin, ancestry, age, disability, marital status, pregnancy, protected veteran status, order of protection status, protected genetic information, or any other characteristic protected by law.
For questions about how to request an accommodation please contact: employeehealth@luriechildrens.org
AI NOTICE
Lurie Children’s utilizes certain AI-enabled features within our recruiting platform to support candidate engagement and assist recruiters in identifying and prioritizing applicants whose experience aligns with job requirements. All employment decisions are made by individuals.
It is a civil rights violation with respect to recruitment, hiring, promotion, or employment for an employer to use artificial intelligence that has the effect of subjecting employees to discrimination on the basis of protected classes under the Illinois Human Rights Act or to use zip codes as a proxy for protected classes.
For questions about the use of artificial intelligence in this process or any additional support, please contact: peoplequestions@luriechildrens.org
See all 2,606+ OPT IT Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT IT Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an IT Engineer
Confirm your role qualifies for STEM OPT
IT Engineer positions typically fall under CIP codes 11 or 14, which qualify for the 24-month STEM extension. Verify your degree CIP code with your DSO before accepting an offer to ensure you can maximize your work authorization period.
Target E-Verify employers from the start
STEM OPT extension requires your employer to be enrolled in E-Verify. Filter your job search to E-Verify employers early. Accepting an offer from a non-E-Verify company locks you into the standard 12-month OPT with no extension option.
Apply before your OPT start date
Most IT hiring cycles run 4 to 8 weeks from application to offer. Start applying 3 months before your OPT begins so you have an active role lined up. Late applications risk an employment gap that could affect your status.
Prioritize companies with H-1B sponsorship history
Companies that have previously sponsored H-1B visas are far more likely to extend support after your OPT ends. Check public H-1B disclosure data to identify employers with consistent IT sponsorship records before investing time in applications.
Get your training plan signed before your STEM extension filing
STEM OPT requires a signed Form I-983 training plan outlining your learning goals and employer obligations. Prepare this document with your manager early. Missing it delays your extension filing and can create an unauthorized employment gap.
IT Engineer OPT: Frequently Asked Questions
Can I work as an IT Engineer on F-1 OPT?
Yes. IT Engineer roles are squarely within the scope of F-1 OPT authorization, provided the position is directly related to your degree field. Most IT engineering jobs align with computer science, information technology, or engineering degree programs, all of which qualify. If your degree CIP code falls under categories 11 or 14, you also qualify for the 24-month STEM OPT extension, giving you up to three years of total work authorization.
Do IT Engineer employers usually sponsor OPT students?
Many do, particularly mid-size and large technology companies, financial services firms, and healthcare organizations with dedicated IT teams. IT engineering is one of the more sponsorship-friendly fields because demand consistently outpaces the domestic talent supply. That said, smaller companies or staffing agencies may decline due to E-Verify enrollment requirements. Migrate Mate lists IT Engineer roles specifically vetted for OPT and visa sponsorship compatibility, making it easier to find employers already open to F-1 candidates.
Does an IT Engineer role qualify for the STEM OPT extension?
It depends on your degree, not just your job title. If your underlying degree is in a STEM-designated field such as computer science, electrical engineering, or information systems, and your IT Engineer role is related to that field, you almost certainly qualify for the 24-month extension. Your DSO will confirm eligibility based on your degree CIP code. The employer must also be enrolled in E-Verify, which is a separate requirement you need to verify before accepting any offer.
What happens if my OPT expires before my employer files for H-1B?
This is one of the most important timelines to manage as an IT Engineer on OPT. If your STEM OPT extension is still active when your employer files an H-1B petition by the April 1 cap-subject deadline, you may be eligible for a cap-gap extension that keeps you authorized until October 1. Without STEM extension, your options narrow significantly. Start H-1B conversations with your employer well before your OPT expiration so there is enough runway to file in time.
Can I work for multiple employers or as a contractor on OPT?
Yes, OPT allows multiple concurrent employers as long as each position is related to your degree field and you work at least 20 hours per week in total. Contract and consulting roles are permitted under standard OPT. However, STEM OPT extension is more restrictive: each employer must be enrolled in E-Verify and must sign a separate Form I-983 training plan. Self-employment is technically allowed on standard OPT but not recommended under STEM OPT due to training plan requirements.