STEM OPT Cloud Security Engineer Jobs
Cloud Security Engineer roles in cloud infrastructure, identity management, and zero-trust architecture qualify for STEM OPT's 24-month extension when your degree falls under an eligible CIP code. Your employer must be enrolled in E-Verify, and you'll need a signed I-983 training plan outlining your engineering responsibilities before your extension begins.
Find STEM OPT Cloud Security Engineer JobsOverview
Showing 5 of 11+ Cloud Security Engineer jobs
See all Cloud Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cloud Security Engineer roles.
Get Access To All JobsOnwards Together!
Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Powered by the Illumio AI Security Graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments – stopping the spread of attacks before they become disasters.
Recognized as a Leader in the Forrester Wave for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
Location: 5 on-site days a week in Sunnyvale, CA Headquarters.
Our Team’s Vision:
Our Engineering team has established a culture based on thought leadership, independence, and responsibility. This powerful dynamic drives us forward as we work to make the digital world a safer place.
Those who join us represent the leader in Zero Trust Segmentation and work on a technology stack that ranges from operating systems to distributed applications to UI and visualization. Together, we will continue to build world-class products—driven by people with different perspectives, backgrounds, and a commitment to innovation in a time when the world faces its greatest cybersecurity threats in history.
Your Impact:
- You will be developing containerized (micro) services for a distributed multi-tenant system that process data and real time events and network telemetry from multiple public clouds to provide real time insights, visibility, and security recommendations to customers so they can identify and minimize risk in the cloud.
- You will design your service, work out all of the details, defend the design/architecture before your peers, and deliver a rock-solid implementation.
- You will also mentor junior engineers, new-grads, and interns to help them grow as engineers and become productive members of the team.
- You will primarily write code in Go and work with data pipeline using SQL or other types of interfaces. We leverage Kubernetes for service infrastructure platform. We welcome people with backgrounds in other languages and technology stacks along with a desire to learn.
- Own critical features and subsystems and own the entire software development lifecycle, from clarifying requirements to ensuring their successful deployment and usage by customers.
- Own operational aspects of the system, being on the front lines and experiencing first-hand the challenges of operating such a system, will make you understand how to write better more supportable software, like no other experience.
- Own code quality, as we do early developer testing and functional/integration testing to ensure we build robust and resilient products.
- Partner with Product Management to review, refine requirement that exceed our customers’ expectations.
- Develop deep understanding of the fundamental problems our customers need solved through interaction with stakeholders and peers.
Your Toolkit:
- Bachelor’s in computer science or equivalent degree. Master’s degree a plus
- 2+ years building distributed & scalable software and systems
- Passion for software development, willing to constantly learn, keeping up with technological trends, and working in a team setting
-
AWS / Azure / GCP cloud experience:
-
Extensively used one of these platforms at the API/programming level
- Experience with networking and security controls is a plus
- Our platform is K8s based so experience delivering a containerized serviced is desired
-
Language requirements:
-
Experience in Go and SQL
- REST API client experience
- CloudFormation, Terraform, Ansible are nice to have
- General TCP/IP networking knowledge
- Unix/Linux programming environment experience
LI-KD1 #LI-ONSITE
This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.
Our Commitment
Illumio believes that an environment of unique backgrounds, experiences, viewpoints, and individual contributions creates a culture of belonging, drives our future, and makes us stronger together in support of our customers and their success.
All official job offers from our company are extended directly by our recruitment team and will be sent through an official E-Signature document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details or social security numbers. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a background check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience.
For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Illumio will consider for employment qualified applicants with arrest and conviction records.
Compensation Range: $141K - $162K
Onwards Together!
Illumio is the leader in ransomware and breach containment, redefining how organizations contain cyberattacks and enable operational resilience. Powered by the Illumio AI Security Graph, our breach containment platform identifies and contains threats across hybrid multi-cloud environments – stopping the spread of attacks before they become disasters.
Recognized as a Leader in the Forrester Wave for Microsegmentation, Illumio enables Zero Trust, strengthening cyber resilience for the infrastructure, systems, and organizations that keep the world running.
Location: 5 on-site days a week in Sunnyvale, CA Headquarters.
Our Team’s Vision:
Our Engineering team has established a culture based on thought leadership, independence, and responsibility. This powerful dynamic drives us forward as we work to make the digital world a safer place.
Those who join us represent the leader in Zero Trust Segmentation and work on a technology stack that ranges from operating systems to distributed applications to UI and visualization. Together, we will continue to build world-class products—driven by people with different perspectives, backgrounds, and a commitment to innovation in a time when the world faces its greatest cybersecurity threats in history.
Your Impact:
- You will be developing containerized (micro) services for a distributed multi-tenant system that process data and real time events and network telemetry from multiple public clouds to provide real time insights, visibility, and security recommendations to customers so they can identify and minimize risk in the cloud.
- You will design your service, work out all of the details, defend the design/architecture before your peers, and deliver a rock-solid implementation.
- You will also mentor junior engineers, new-grads, and interns to help them grow as engineers and become productive members of the team.
- You will primarily write code in Go and work with data pipeline using SQL or other types of interfaces. We leverage Kubernetes for service infrastructure platform. We welcome people with backgrounds in other languages and technology stacks along with a desire to learn.
- Own critical features and subsystems and own the entire software development lifecycle, from clarifying requirements to ensuring their successful deployment and usage by customers.
- Own operational aspects of the system, being on the front lines and experiencing first-hand the challenges of operating such a system, will make you understand how to write better more supportable software, like no other experience.
- Own code quality, as we do early developer testing and functional/integration testing to ensure we build robust and resilient products.
- Partner with Product Management to review, refine requirement that exceed our customers’ expectations.
- Develop deep understanding of the fundamental problems our customers need solved through interaction with stakeholders and peers.
Your Toolkit:
- Bachelor’s in computer science or equivalent degree. Master’s degree a plus
- 2+ years building distributed & scalable software and systems
- Passion for software development, willing to constantly learn, keeping up with technological trends, and working in a team setting
-
AWS / Azure / GCP cloud experience:
-
Extensively used one of these platforms at the API/programming level
- Experience with networking and security controls is a plus
- Our platform is K8s based so experience delivering a containerized serviced is desired
-
Language requirements:
-
Experience in Go and SQL
- REST API client experience
- CloudFormation, Terraform, Ansible are nice to have
- General TCP/IP networking knowledge
- Unix/Linux programming environment experience
LI-KD1 #LI-ONSITE
This position involves access to software/technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls.
Our Commitment
Illumio believes that an environment of unique backgrounds, experiences, viewpoints, and individual contributions creates a culture of belonging, drives our future, and makes us stronger together in support of our customers and their success.
All official job offers from our company are extended directly by our recruitment team and will be sent through an official E-Signature document for your review and signature. Please be aware that we do not ask for any personal information in the process of extending offers of employment, such as financial details or social security numbers. Upon acceptance of any offer, we will request such information as part of the onboarding process prior to or on your first day of employment, and only after completing a background check through an authorized third-party vendor. If you receive any communication asking for personal details outside of these processes, please contact us immediately to verify the authenticity of the request. Your security is important to us, and we are committed to a safe and transparent hiring experience.
For roles in San Francisco and Los Angeles: Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Illumio will consider for employment qualified applicants with arrest and conviction records.
Compensation Range: $141K - $162K
See all STEM OPT Cloud Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Cloud Security Engineer Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Cloud Security Engineer
Verify your CIP code before applying
Cloud Security Engineer roles typically align with Computer Science, Information Assurance, or Cybersecurity CIP codes. Confirm your degree's exact CIP code with your DSO before targeting roles, since mismatches can delay or void your STEM OPT extension application.
Check E-Verify enrollment before accepting offers
Your employer must be enrolled in E-Verify before your STEM OPT extension is approved. Ask hiring managers directly during the offer stage, or search the E-Verify employer search tool to confirm enrollment status before you sign anything.
Build cloud security credentials that signal sponsorship readiness
Certifications like CCSP, AWS Security Specialty, or Google Professional Cloud Security Engineer demonstrate hands-on competency that reduces employer hesitation around OPT training plans. Pair at least one vendor-neutral cert with a cloud-provider credential to cover both architecture and compliance conversations.
Use Migrate Mate to find E-Verify enrolled employers
Filter your job search on Migrate Mate to surface Cloud Security Engineer roles at employers already enrolled in E-Verify and with STEM OPT hiring history, so you're not spending time on companies whose HR teams can't support your authorization.
Draft your I-983 training plan around real job duties
USCIS requires your I-983 to map specific learning objectives to your engineering tasks. Work with your hiring manager to list concrete responsibilities like threat modeling, SIEM configuration, or IAM policy design rather than generic descriptions, which reduces RFE risk.
Target roles with government or defense cloud contracts
Federal contractors hiring Cloud Security Engineers frequently already operate under FedRAMP or DoD cloud compliance frameworks, which means their HR and legal teams have existing processes for sponsoring OPT workers and filing I-983 training plans efficiently.
Frequently Asked Questions
Does a Cloud Security Engineer role qualify for the STEM OPT extension?
Yes, if your bachelor's, master's, or doctoral degree is in a STEM-designated field such as Computer Science, Information Security, or Cybersecurity and your employer is enrolled in E-Verify. The role itself must provide practical training directly related to your degree. Your DSO reviews the I-983 training plan to confirm the connection between your engineering duties and your academic background before approving the extension.
What does the I-983 training plan need to include for a Cloud Security Engineer?
The I-983 must describe specific learning goals tied to your day-to-day engineering work, such as cloud infrastructure security design, vulnerability assessment workflows, or identity and access management implementation. Vague descriptions like 'general IT security work' increase the risk of a USCIS request for evidence. Your employer's direct supervisor signs the form, and your DSO must authorize it before you submit the STEM OPT extension request.
How do I confirm my employer is enrolled in E-Verify before accepting a Cloud Security Engineer offer?
Ask the recruiter or HR contact directly whether the company is enrolled in E-Verify, and request their E-Verify company ID number if you want to verify independently through the E-Verify employer search portal. Some large enterprises are enrolled at the corporate level but not at every subsidiary, so confirm that the specific legal entity extending your offer is the enrolled entity, not just the parent company.
What happens to my Cloud Security Engineer job authorization if my H-1B is selected but not yet active?
If your H-1B visa petition is selected in the lottery and your employer files before your OPT expires, the cap-gap rule extends your F-1 status and work authorization automatically through September 30 of that fiscal year. You can continue working as a Cloud Security Engineer under cap-gap without interruption. USCIS does not issue a separate document for cap-gap, but your I-20 with the cap-gap notation serves as evidence of continued authorization.
Where can I find Cloud Security Engineer jobs at employers who support STEM OPT?
Migrate Mate filters Cloud Security Engineer listings to show employers enrolled in E-Verify and with a history of hiring STEM OPT students, which removes the guesswork of cold-applying to companies whose HR teams aren't equipped to handle your training plan requirements. Searching there first saves significant time compared to filtering general job boards after the fact.