STEM OPT Cloud Consultant Jobs
Cloud Consultant roles in infrastructure, DevOps, and cloud architecture qualify for the STEM OPT 24-month extension if your degree falls under an eligible CIP code. Your employer must be enrolled in E-Verify and sign an I-983 training plan before your extension begins. Migrate Mate lists Cloud Consultant jobs at E-Verify-enrolled employers.
Find STEM OPT Cloud Consultant JobsOverview
Showing 5 of 10+ Cloud Consultant jobs










See all Cloud Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cloud Consultant roles.
Get Access To All Jobs
INTRODUCTION
GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.
ABOUT THE JOB
We are looking for a skilled Associate Cloud Security Engineer - AWS to support cloud security consulting engagements within the Cloud practice. This early-career role focuses on assisting with security assessments, architecture reviews, compliance mapping, and cloud-native control implementation in AWS environments. You will work alongside senior consultants on diverse client engagements while providing "Wow Them" service to clients and internal teammates.
The Associate Cloud Security Engineer - AWS will be expected to demonstrate foundational AWS security skills, a strong willingness to learn, and effective communication abilities. This role offers hands-on mentorship, exposure to diverse client environments, and a clear path to professional growth within a leading cybersecurity consultancy.
ABOUT THE CLOUD SECURITY (AWS) PRACTICE
The Cloud Security (AWS) practice is responsible for delivering security consulting services to clients operating in Amazon Web Services environments. We design, assess, and implement secure cloud architectures across the organization.
Our team of cloud security engineers and consultants focuses on architecture design, risk assessments, compliance, and cloud-native security control implementation. We partner with clients across industries to strengthen their cloud security posture.
- Focus on AWS-native security tooling and cloud security best practices
- Hands-on consulting engagements from assessment through implementation
- Growing practice with strong mentorship and professional development opportunities
ROLE AND RESPONSIBILITIES:
- Support delivery teams by assisting with cloud security assessments, documentation, and client deliverable preparation under the guidance of senior consultants
- Participate in client meetings, workshops, and discovery sessions to develop consulting and communication skills
- Assist with AWS security assessments to help identify misconfigurations, operational risks, and compliance gaps
- Help document findings, recommendations, and remediation steps for client deliverables
- Support the development of security roadmaps, gap analyses, architecture diagrams, and other deliverables
- Assist with AWS security configurations including IAM policies, CloudTrail, GuardDuty, Security Hub, and Config
- Contribute to internal methodologies, templates, and reusable assessment frameworks
- Actively participate in knowledge sharing and mentorship opportunities within the team
BASIC QUALIFICATIONS:
- 1 year of related experience
- Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
- AWS Certified Cloud Practitioner certification (required)
- Minimum of 1 year of hands-on experience with AWS cloud services (internships, lab environments, and project-based experience count)
- Foundational understanding of AWS IAM including roles, policies, and MFA configuration
- Familiarity with AWS security services such as CloudTrail, GuardDuty, Security Hub, and AWS Config
- Exposure to Infrastructure as Code tools (Terraform, CloudFormation, or CDK)
- Understanding of core network security concepts including VPCs, security groups, and NACLs
- Basic scripting ability (Python preferred; Bash or PowerShell also acceptable)
- Awareness of multi-account AWS environment concepts
- Strong written and verbal communication skills
PREFERRED QUALIFICATIONS:
- Bachelor's degree in Cybersecurity, Computer Science, Engineering, or related field
- AWS Certified Solutions Architect – Associate or AWS Certified Security – Specialty certification
- Exposure to AWS Organizations, SCPs, or permission boundaries
- Familiarity with CI/CD pipeline security concepts and preventive guardrails
- Experience with CSPM, CWPP, or CIEM tools
- Prior internship, co-op, or project experience in a cybersecurity or cloud engineering role
- CompTIA Security+ or CCSK (Certificate of Cloud Security Knowledge) certification
TRAVEL REQUIREMENTS:
- Up to 10% travel
Physical Requirements:
- Sedentary work
- Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
- Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day
Why GuidePoint?
GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. Since its inception in 2011, GuidePoint has grown to over 1,300 employees, established strategic partnerships with leading security vendors, and serves as a trusted advisor to more than 6,200 customers.
Firmly-defined core values drive all aspects of the business, which have been paramount to the company's success and establishment of an enjoyable workplace atmosphere. At GuidePoint, your colleagues are knowledgeable, skilled, and experienced and will seek to collaborate and provide mentorship and guidance at every opportunity.
This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation.
Some added perks….
- Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
- Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
- Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
- 12 corporate holidays and a Flexible Time Off (FTO) program
- Healthy mobile phone and home internet allowance
- Eligibility for retirement plan after 2 months at open enrollment
- Pet Benefit Option
We use Greenhouse Software as our applicant tracking system and Zoom Scheduler for HR screen request scheduling. At times, your email may block our communication with you. Please be sure to check your SPAM folder so that you don't miss updates on your application.
See all STEM OPT Cloud Consultant Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Cloud Consultant Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Cloud Consultant
Verify your CIP code before applying
Cloud Consultant roles typically align with Computer Science, Information Systems, or Computer Engineering CIP codes. Confirm your degree's exact CIP code with your DSO before targeting employers, since a mismatch can invalidate your extension eligibility entirely.
Check E-Verify enrollment before interviews
Not every consulting firm or cloud services company is E-Verify enrolled. Run the employer's legal entity name through the E-Verify employer search tool before investing time in their process, since STEM OPT authorization requires this enrollment.
Use O*NET to frame your specialty occupation
Pull the Cloud Consultant occupation profile from O*NET and cross-reference the listed knowledge domains with your degree coursework. This alignment matters when your employer drafts the I-983 training plan and justifies the role as a qualifying STEM position.
Negotiate your I-983 training plan during offer stage
Ask for the I-983 training plan draft before you sign an offer. Cloud Consultant scopes vary widely across firms, and a vague training plan listing only 'cloud projects' can trigger a USCIS RFE or DSO rejection. Get specific learning objectives and skill milestones written in.
Target employers with active H-1B filing history
Use Migrate Mate to filter Cloud Consultant roles by employers who have filed H-1B visa petitions for similar roles. Active DOL Labor Condition Application filings signal that a company understands the sponsorship process and has infrastructure to support work authorization transitions after your OPT period ends.
File your STEM OPT extension 90 days early
USCIS allows you to apply for the 24-month extension up to 90 days before your initial OPT EAD expires. Cloud Consultant hiring cycles at larger firms can run eight to twelve weeks, so aligning your application window with your job search timeline prevents authorization gaps.
Frequently Asked Questions
Does a Cloud Consultant role qualify for the STEM OPT extension?
It depends on your degree's CIP code and how the role is scoped. Cloud Consultant positions involving architecture design, systems integration, or infrastructure engineering typically align with qualifying STEM CIP codes like Computer Science or Information Systems. Roles framed as pure project management or client relationship work are harder to justify. Your DSO confirms eligibility based on your specific degree and the employer's I-983 training plan description.
What E-Verify requirement applies to my STEM OPT employer?
Every employer who hires you on a STEM OPT extension must be actively enrolled in E-Verify at the specific work site where you perform duties. This includes client sites if you're placed there by a staffing or consulting firm. Enrollment must exist before your extension start date. If the employer is E-Verify enrolled at headquarters but not at a client site, your authorization at that site is not valid.
How does the I-983 training plan work for a Cloud Consultant?
The I-983 requires your employer to document specific learning goals tied to your STEM degree, your job duties, and measurable outcomes for each evaluation period. For Cloud Consultant roles, this means listing concrete skills like cloud architecture frameworks, infrastructure automation, or security compliance domains rather than generic descriptions. Your supervisor signs it, your DSO approves it, and USCIS can request it during any review. Update it every 12 months or when your role changes significantly.
What happens to my work authorization if my H-1B is selected in the lottery during STEM OPT?
If your employer files an H-1B petition before April 1 and your OPT or STEM OPT EAD expires before October 1, the cap-gap rule automatically extends your work authorization through September 30. You can continue working as a Cloud Consultant during this gap without interruption as long as the petition was filed on time and remains pending or approved. USCIS issues updated guidance on cap-gap coverage each spring.
Where can I find Cloud Consultant jobs at employers who already support STEM OPT?
Migrate Mate filters Cloud Consultant roles by employers with verified E-Verify enrollment and H-1B Labor Condition Application filing history, which indicates familiarity with work authorization requirements. This saves you from discovering an employer's sponsorship limitations after multiple interview rounds. You can search by cloud platform specialization, company size, and location to narrow results to firms whose infrastructure aligns with your STEM OPT timeline.