STEM OPT Cloud Security Architect Jobs
Cloud Security Architect roles sit squarely within STEM OPT eligibility, drawing on degrees in computer science, information security, and related fields. Your STEM OPT extension adds 24 months of work authorization beyond your initial OPT period, but your employer must be enrolled in E-Verify before you can start.
Find STEM OPT Cloud Security Architect JobsOverview
Showing 5 of 10+ Cloud Security Architect jobs










See all Cloud Security Architect Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cloud Security Architect roles.
Get Access To All Jobs
INTRODUCTION
GE Vernova is seeking a Staff Cyber Security Architect to help ensure that our application and infrastructure architecture is secure.
In this role, you will support security architecture reviews for cloud and on-premise systems, helping teams design solutions that are secure by design and aligned to GEV security requirements. The ideal candidate brings practical cybersecurity experience, a strong commitment to service excellence, and an interest in protecting and shaping the future of energy.
Responsibilities Include:
Security Architecture and Governance
- Support security architecture activities for AWS and Azure application and infrastructure deployments.
- Participate in security architecture reviews and risk assessments within the enterprise architecture domain governance model.
- Contribute to system architecture designs that follow secure-by-design principles and security best practices.
- Ensure secure-by-design architectures for AI applications and AI agents, including identity, data access, model and tool integration, runtime controls, and human oversight.
- Conduct security reviews for generative AI solutions, agentic workflows, and supporting platforms across cloud and on-premise environments.
Risk, Documentation, and Reusable Guidance
- Draft and publish risk assessment reports that clearly outline cyber risks and mitigating controls.
- Develop and maintain reusable solution patterns that improve clarity, consistency, and alignment across designs.
- Develop and maintain security-related documentation, including policies, standards, and leading practices.
- Contribute to reusable security patterns and risk guidance for AI applications and agents, including prompt and data protection, model supply chain, agent identity and permissions, monitoring, and lifecycle governance.
Technical Development and Collaboration
- Research emerging technologies, industry developments, and market trends to support enterprise project delivery and operations.
- Build technical knowledge within the function by staying current on industry technology and security trends.
- Build peer and cross-functional relationships to share best practices and improve team effectiveness.
- Work collaboratively with project teams and the broader security architecture team to provide practical security guidance.
BASIC QUALIFICATIONS:
- Education: Bachelor’s degree in Information Systems, Information Technology, Computer Science, Cybersecurity, Computer Engineering, or a related field from an accredited college or university.
- Professional Experience: At least 4 years of experience in enterprise IT and/or cybersecurity.
- Cybersecurity Architecture: At least 1 year of experience supporting cybersecurity architecture, secure solution design, or security assessments.
PREFERRED QUALIFICATIONS:
Cybersecurity Architecture and Technical Expertise
- Experience supporting cybersecurity architecture or secure solution design in AWS, Azure, or GCP.
- Experience with threat modeling, multi-tier web applications, and relevant security standards.
- Familiarity with security considerations for AI and generative AI applications, including large language model integrations, retrieval-augmented generation, APIs, or agentic systems.
- Awareness of AI security risks and controls, including prompt injection, sensitive data exposure, insecure tool use, excessive agency, model and dependency risks, and AI agent identity and access governance.
- Relevant security certification or cloud security training, such as Security+, CCSP, AWS Security, or Azure Security, is a plus.
Collaboration and Influence
- Experience partnering with solution architects to design secure systems.
- Strong communication and interpersonal skills, with the ability to work independently and as part of a team.
- Ability to communicate recommendations, collaborate with stakeholders, and build alignment across Digital Technology teams.
Problem Solving and Adaptability
- Strong analytical and problem-solving skills.
- Comfortable working in new areas that require rapid learning, sound judgment, and continuous improvement.
- Ability to gather input from stakeholders and translate business and technical requirements into practical security guidance with support from senior team members.
ADDITIONAL INFORMATION
GE Vernova offers a great work environment, professional development, challenging careers, and competitive compensation. GE Vernova is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.
GE Vernova will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).
Relocation Assistance Provided: No
LI-Remote - This is a remote position
Application Deadline: November 10, 2026
For candidates applying to a U.S. based position, the pay range for this position is between $111,900.00 and $186,500.00. The Company pays a geographic differential of 110%, 120% or 130% of salary in certain areas. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.
Bonus eligibility: discretionary annual bonus.
This posting is expected to remain open for at least seven days after it was posted on October 27, 2026.
Available benefits include medical, dental, vision, and prescription drug coverage; access to Health Coach from GE Vernova, a 24/7 nurse-based resource; and access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services. Retirement benefits include the GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants. Other benefits include tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays, and permissive time off.
GE Vernova Inc. or its affiliates (collectively or individually, “GE Vernova”) sponsor certain employee benefit plans or programs GE Vernova reserves the right to terminate, amend, suspend, replace, or modify its benefit plans and programs at any time and for any reason, in its sole discretion. No individual has a vested right to any benefit under a GE Vernova welfare benefit plan or program. This document does not create a contract of employment with any individual.
See all STEM OPT Cloud Security Architect Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Cloud Security Architect Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization in Cloud Security Architect
Verify your CIP code matches security
Cloud Security Architect roles typically require a degree in computer science, cybersecurity, or information systems. Check your diploma's CIP code against the DHS STEM Designated Degree Program List to confirm your degree qualifies before applying.
Confirm E-Verify enrollment before accepting offers
Your employer must be enrolled in E-Verify to legally employ you on STEM OPT. Ask recruiters directly whether the hiring entity, not just the parent company, is enrolled, since subsidiaries and staffing agencies have separate accounts.
Build a cloud security credential stack early
Employers filing STEM OPT training plans for architect-level roles expect hands-on cloud platform experience. Earning credentials like AWS Security Specialty or Google Professional Cloud Security Engineer before your job search strengthens your I-983 learning objectives significantly.
Target employers with active H-1B filing history
Use Migrate Mate to filter Cloud Security Architect roles by employers who have filed H-1B visa LCAs, giving you visibility into which companies routinely sponsor immigration beyond the OPT window and are already familiar with the compliance requirements.
Negotiate your I-983 training plan scope carefully
Your I-983 must list specific learning objectives tied to your architecture role. Push to include cloud security framework implementation, zero-trust design projects, and compliance audits so your training plan reflects real work and survives SEVP scrutiny.
Time your H-1B registration around your OPT end date
STEM OPT extensions last 24 months, but H-1B cap-gap protection only applies if USCIS receives a timely filed petition before your authorization expires. Map your OPT end date against the April 1 H-1B filing window to identify whether a gap exists.
Frequently Asked Questions
Does a Cloud Security Architect role qualify for the STEM OPT extension?
Yes, provided your degree is on the DHS STEM Designated Degree Program List. Cloud Security Architect positions are classified under computer and information systems occupations in O*NET, and degrees in computer science, cybersecurity, information assurance, or related engineering fields typically carry qualifying CIP codes. Confirm your specific CIP code with your DSO before filing the extension.
What must my employer do to hire me on STEM OPT as a Cloud Security Architect?
Your employer must be enrolled in E-Verify before your STEM OPT employment begins. They must also sign your Form I-983 training plan, which requires documenting specific learning objectives tied to your Cloud Security Architect duties, confirming you'll be paid and supervised like a regular employee, and committing to report material changes in your role to your DSO.
What should my I-983 training plan include for a Cloud Security Architect position?
Your I-983 should detail learning objectives directly tied to your role, such as designing cloud security architectures, implementing identity and access management frameworks, conducting threat modeling, and achieving compliance with standards like NIST or FedRAMP. Generic objectives like 'gain experience in IT' won't hold up. Your employer's supervisor signs the plan and is responsible for its accuracy.
How do I find Cloud Security Architect employers who support STEM OPT and sponsor visas long-term?
Migrate Mate surfaces Cloud Security Architect roles filtered for employers with active E-Verify enrollment and H-1B Labor Condition Application filing history, so you can prioritize companies that have already navigated immigration compliance. This matters because STEM OPT is a bridge, not a permanent solution, and your employer's H-1B track record signals whether they'll support your next status change.
Does cap-gap protection apply if my STEM OPT expires before my H-1B start date?
Cap-gap protection extends your OPT work authorization through September 30 of the H-1B fiscal year if USCIS receives a properly filed, timely H-1B petition before your STEM OPT expires. You must remain in valid F-1 status, and your employer must continue your E-Verify-compliant employment without interruption. USCIS issues an updated I-20 reflecting the cap-gap period through your DSO.