Systems Security Engineer Jobs for OPT Students
Systems Security Engineer jobs are among the most OPT-friendly roles in tech. Employers across defense contracting, finance, and cloud infrastructure regularly sponsor H-1B and O-1 visas. STEM OPT extension eligibility applies, giving you up to three years of authorized work to build your security career.
See All Systems Security Engineer JobsOverview
Showing 5 of 333+ Systems Security Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 333+ Systems Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Systems Security Engineer roles.
Get Access To All JobsINTRODUCTION
The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country; its mission is to combat municipal corruption. DOI serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds. The Information Technology Unit of the NYC Department of Investigation is currently seeking a highly skilled, motivated and hands-on System Security Engineer to manage and secure our environment, including Active Directory, Windows Servers, Exchange (on-prem and Online), Microsoft 365, AirWatch MDM, and file shares. This role supports system stability and cybersecurity readiness, emphasizing automation, practical risk management, prioritization, and collaboration, ensuring our core systems remain secure, efficient, and compliant within a small but capable IT team.
ROLE AND RESPONSIBILITIES
Key Responsibilities
- Active Directory Administration: Manage user accounts, permissions, and Group Policy Objects (GPOs); secure and monitor domain controllers.
- Exchange Management: Administer Exchange on-premises and Exchange Online hybrid environments, managing mail flow, mailbox provisioning, spam filtering, and secure mail routing.
- Security & Compliance: Apply Microsoft and CIS hardening baselines; enforce consistent GPO and Exchange security configurations; monitor logs for anomalies.
- Patch & Configuration Management: Implement and manage regular patching schedules for Windows Servers, Exchange systems, and related components.
- Monitoring & Response: Leverage Proofpoint, Varonis, Adaudit, SIEM, Endpoint Manager, and AirWatch MDM to monitor user activity, device compliance, system configurations, and mail flow. Investigate alerts and anomalies related to AD, Exchange, and endpoints to detect and respond promptly to potential security incidents.
- File Share Management: Maintain secure access controls and auditing for on-prem file shares; monitor for data access anomalies using Varonis.
- Certificates & PKI: Manage digital certificates, renewals, and certificate authorities (CAs) for servers, internal services, and authentication.
- Backup & Recovery: Ensure reliable backups for AD, Exchange, file shares, and critical servers; test restoration procedures regularly.
- Automation & Documentation: Develop PowerShell scripts to automate patching, mailbox management, and security reporting; maintain accurate operational documentation.
- Collaboration: Work cross-functionally with IT support and network teams to maintain a secure, resilient infrastructure.
If selected, the candidate will be fingerprinted and undergo a background investigation. In addition, because the position has a law enforcement and/or investigative function, the candidate's consumer credit history will be reviewed during the background investigation, as permitted by NYC Administrative Code 8-107(24)(b)(2)(A).
MINIMUM QUALIFICATIONS
- A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
- A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described in “1" above, including one year in a project leader capacity or as a major contributor on a complex project; or
- A satisfactory combination of education and experience that is equivalent to (1) or (2) above. College education may be substituted for up to two years of the required experience in (2) above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A master's degree in computer science or a related computer field may be substituted for one year of the required experience in (1) or (2) above. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.
PREFERRED QUALIFICATIONS
- Experience managing Active Directory, Exchange (on-prem and Online), and Microsoft 365 environments.
- Strong skills in Windows Server administration, patch management, and system hardening.
- Working knowledge of Proofpoint, Varonis, Ad Audit, SIEM, Endpoint Manager, and Workspace One MDM.
- Proficiency in PowerShell scripting for automation and auditing.
- Familiarity with certificate management (PKI) and file share security.
- Experience with VMware or Hyper-V virtualization platforms.
- Focus: A practical, security-focused administrator ensuring uptime, resilience, and protection across identity, messaging, and data-sharing systems within a lean operational model.
COMPENSATION
- Salary: $52,426.00 – $117,295.00
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for two continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of the interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
INTRODUCTION
The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country; its mission is to combat municipal corruption. DOI serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds. The Information Technology Unit of the NYC Department of Investigation is currently seeking a highly skilled, motivated and hands-on System Security Engineer to manage and secure our environment, including Active Directory, Windows Servers, Exchange (on-prem and Online), Microsoft 365, AirWatch MDM, and file shares. This role supports system stability and cybersecurity readiness, emphasizing automation, practical risk management, prioritization, and collaboration, ensuring our core systems remain secure, efficient, and compliant within a small but capable IT team.
ROLE AND RESPONSIBILITIES
Key Responsibilities
- Active Directory Administration: Manage user accounts, permissions, and Group Policy Objects (GPOs); secure and monitor domain controllers.
- Exchange Management: Administer Exchange on-premises and Exchange Online hybrid environments, managing mail flow, mailbox provisioning, spam filtering, and secure mail routing.
- Security & Compliance: Apply Microsoft and CIS hardening baselines; enforce consistent GPO and Exchange security configurations; monitor logs for anomalies.
- Patch & Configuration Management: Implement and manage regular patching schedules for Windows Servers, Exchange systems, and related components.
- Monitoring & Response: Leverage Proofpoint, Varonis, Adaudit, SIEM, Endpoint Manager, and AirWatch MDM to monitor user activity, device compliance, system configurations, and mail flow. Investigate alerts and anomalies related to AD, Exchange, and endpoints to detect and respond promptly to potential security incidents.
- File Share Management: Maintain secure access controls and auditing for on-prem file shares; monitor for data access anomalies using Varonis.
- Certificates & PKI: Manage digital certificates, renewals, and certificate authorities (CAs) for servers, internal services, and authentication.
- Backup & Recovery: Ensure reliable backups for AD, Exchange, file shares, and critical servers; test restoration procedures regularly.
- Automation & Documentation: Develop PowerShell scripts to automate patching, mailbox management, and security reporting; maintain accurate operational documentation.
- Collaboration: Work cross-functionally with IT support and network teams to maintain a secure, resilient infrastructure.
If selected, the candidate will be fingerprinted and undergo a background investigation. In addition, because the position has a law enforcement and/or investigative function, the candidate's consumer credit history will be reviewed during the background investigation, as permitted by NYC Administrative Code 8-107(24)(b)(2)(A).
MINIMUM QUALIFICATIONS
- A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
- A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described in “1" above, including one year in a project leader capacity or as a major contributor on a complex project; or
- A satisfactory combination of education and experience that is equivalent to (1) or (2) above. College education may be substituted for up to two years of the required experience in (2) above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A master's degree in computer science or a related computer field may be substituted for one year of the required experience in (1) or (2) above. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.
PREFERRED QUALIFICATIONS
- Experience managing Active Directory, Exchange (on-prem and Online), and Microsoft 365 environments.
- Strong skills in Windows Server administration, patch management, and system hardening.
- Working knowledge of Proofpoint, Varonis, Ad Audit, SIEM, Endpoint Manager, and Workspace One MDM.
- Proficiency in PowerShell scripting for automation and auditing.
- Familiarity with certificate management (PKI) and file share security.
- Experience with VMware or Hyper-V virtualization platforms.
- Focus: A practical, security-focused administrator ensuring uptime, resilience, and protection across identity, messaging, and data-sharing systems within a lean operational model.
COMPENSATION
- Salary: $52,426.00 – $117,295.00
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for two continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of the interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
How to Get Visa Sponsorship as a Systems Security Engineer
Target STEM OPT-eligible employers first
Systems Security Engineering falls under CIP codes tied to computer science and information security, qualifying for the 24-month STEM OPT extension. Prioritize employers enrolled in E-Verify, which is required to sponsor STEM OPT extensions.
Lead with certifications, not just your degree
Security clearance eligibility, CISSP, CEH, or CompTIA Security+ certifications signal job-readiness to hiring managers. Employers weighing visa sponsorship costs want evidence you can contribute immediately. Certifications reduce perceived risk and accelerate hiring decisions.
Address clearance eligibility proactively
Many Systems Security Engineer roles require or prefer security clearances. As an F-1 student, clarify your clearance eligibility early. Some roles accept non-citizens for lower-tier clearances. Avoiding clearance-required roles entirely cuts your market unnecessarily.
Target industries with established sponsorship pipelines
Finance, healthcare IT, cloud providers, and federal contractors sponsor Systems Security Engineers at higher rates than most industries. These sectors have legal teams experienced with OPT and H-1B processes, making sponsorship conversations significantly less complicated.
Quantify your impact in security terms
Employers sponsoring visas expect measurable contributions. Frame resume achievements around incidents prevented, vulnerabilities remediated, or compliance frameworks implemented. Numbers tied to security outcomes are far more compelling than generic descriptions of responsibilities.
Systems Security Engineer jobs are hiring across the US. Find yours.
Find Systems Security Engineer JobsSee all 333+ Systems Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Systems Security Engineer roles.
Get Access To All JobsFrequently Asked Questions
Can I work as a Systems Security Engineer on F-1 OPT?
Yes. Systems Security Engineering is a STEM-designated field, meaning your F-1 OPT authorization covers this role directly. If your degree is in computer science, information security, or a related field, you also qualify for the 24-month STEM OPT extension after your initial 12-month OPT period, giving you up to three years of total work authorization.
Do Systems Security Engineer roles commonly sponsor H-1B visas?
Yes, more consistently than most engineering roles. Cybersecurity talent is in short supply, and employers in finance, cloud infrastructure, defense contracting, and healthcare IT regularly file H-1B petitions for Systems Security Engineers. Migrate Mate filters job listings by sponsorship willingness, so you can focus on employers who have sponsored these roles before.
Does my employer need to be enrolled in E-Verify for STEM OPT?
Yes. To authorize your 24-month STEM OPT extension, your employer must be enrolled in E-Verify at the time of your extension request. This is a federal requirement with no exceptions. Before accepting an offer, confirm E-Verify enrollment directly with the employer's HR team, as not all companies maintain active enrollment.
Will a security clearance requirement disqualify me as an OPT student?
Not automatically. Many Systems Security Engineer roles require eligibility for a clearance rather than an active one. Some agencies and contractors can sponsor non-citizens for lower-tier clearances depending on role, contract type, and nationality. Roles requiring Top Secret or SCI access are generally not viable on F-1 OPT, so filter accordingly when applying.
What happens to my OPT authorization if I switch employers as a Systems Security Engineer?
Your OPT authorization remains valid when you change employers, but you must report the change to your DSO within ten days and update your SEVIS record. The new employer must also be enrolled in E-Verify if you are on a STEM OPT extension. Gaps in employment exceeding 90 days can jeopardize your OPT status, so plan transitions carefully.
See which Systems Security Engineer employers are hiring and sponsoring visas right now.
Search Systems Security Engineer Jobs