STEM OPT Enterprise Systems Engineer Jobs
Enterprise Systems Engineer roles in cloud infrastructure, ERP platforms, and systems integration qualify for the 24-month STEM OPT extension if your degree falls under an eligible CIP code. Your employer must be enrolled in E-Verify, and you'll file an I-983 training plan outlining engineering objectives tied to your STEM degree.
Find STEM OPT Enterprise Systems Engineer JobsOverview
Showing 5 of 18+ Enterprise Systems Engineer jobs










See all Enterprise Systems Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Enterprise Systems Engineer roles.
Get Access To All Jobs
INTRODUCTION
Blackstone is the world’s largest alternative asset manager. We seek to create positive economic impact and long-term value for our investors, the companies we invest in, and the communities in which we work. We do this by using extraordinary people and flexible capital to help companies solve problems. Our $1.1 trillion in assets under management include investment vehicles focused on private equity, real estate, public debt and equity, infrastructure, life sciences, growth equity, opportunistic, non-investment grade credit, real assets and secondary funds, all on a global basis.
ABOUT THE JOB
The Enterprise Technology Team at Blackstone, in partnership with Physical Security, is responsible for protecting the firm’s people, offices, and operations across the globe. This includes providing security for in-house events, external events, executive protection, and day-to-day operations to ensure a safe and secure environment. We are seeking a full-time employee to join the team in our New York office to support these critical functions.
POSITION OVERVIEW:
The System Engineer has expertise in and deep knowledge of globally deployed enterprise software systems. This individual will play a critical role in ensuring the reliability, scalability, and integration of the firm’s physical security platforms, enabling seamless operations and informed decision-making for stakeholders and leadership. The role requires a hands-on approach to system architecture, automation, and integrations, with a focus on driving innovation and operational excellence.
JOB DESCRIPTION:
The System Engineer will be responsible for the technical management, modernization, and integration of the firm’s physical security platforms, including access control, visitor management, mass notification, incident management, video management systems (VMS), and identity/IAM solutions. Key responsibilities include:
-
Platform Maintenance and Modernization: Ensure the reliability, scalability, and security of physical security platforms through upgrades, patch management, and lifecycle planning.
-
Systems Integration: Develop and implement integrations across internally hosted and SaaS solutions using APIs, webhooks, event streams, and data pipelines to enable unified workflows and dashboards.
-
Automation and Optimization: Design and deploy automation scripts and workflows to streamline operations, enhance system performance, and reduce manual intervention.
-
Data Management: Ensure data quality, normalization, and taxonomy alignment across platforms to support analytics, alerting, and operational reporting.
-
Technical Design and Architecture: Collaborate with IT and engineering teams to design high-availability architectures, disaster recovery plans, and continuity runbooks for physical security systems.
-
Compliance and Security Standards: Align systems and processes with regulatory requirements (e.g., SOX, GDPR/CCPA) and security best practices to ensure compliance and mitigate risks.
-
Incident Response and Troubleshooting: Act as the technical lead for resolving platform-related incidents, including performing root cause analysis and ensuring timely resolution.
-
Vendor Management: Partner with vendors to evaluate new technologies, manage platform roadmaps, and oversee renewals and end-of-life planning.
-
Security Operations Support: Provide technical support and system enhancements for the Global Security Operations Center (GSOC), ensuring the integration and functionality of platforms critical to real-time monitoring, incident response, and decision-making.
REQUIRED QUALIFICATIONS:
-
5+ years as a Systems or Platform Engineer delivering enterprise platforms.
-
Proficiency in API development, event-driven architecture, and data pipeline tools (e.g., Kafka, Splunk, or similar).
-
Strong scripting skills (e.g., Python, PowerShell) for automating workflows and system tasks.
-
Experience with data modeling, normalization, and governance frameworks to support analytics and reporting.
-
Familiarity with identity platforms (e.g., Azure AD, Okta) and authentication protocols (e.g., SSO, SAML).
-
Skills to design and maintain highly available Windows server environments, ensuring reliable performance, strong security, and scalable infrastructure that supports mission‑critical business applications.
-
Experience with local and cloud-based solutions and SaaS integrations.
PREFERRED QUALIFICATIONS:
-
Hands-on experience with physical security technologies such as CCure, Everbridge, SwiftConnect, Genetec, Ontic, Ambient, or similar systems.
-
Understanding of regulatory requirements such as SOC, SOX, GDPR, and CCPA as they apply to physical security systems.
-
Experience with local and cloud-based security solutions and SaaS integrations preferred.
-
Exposure to data visualization tools (e.g., Tableau, Sigma) for creating dashboards and reports is preferred.
-
Experience with badge provisioning and physical-digital identity workflows.
-
Certifications such as CSPO/PSPO, PMP, SAFe POPM, or security certifications relevant to physical security operations preferred.
-
Experience working in the financial services industry, particularly in highly regulated environments, is preferred.
-
Product ownership experience with Backlog curation, prioritization, and outcome-based road mapping.
-
Technical Expertise in API-first integration, data modeling, event-driven architecture, RBAC/ABAC, and SSO/IAM fundamentals.
-
Security domain knowledge of access control, visitor management, mass notification, incident management, video platforms, and analytics.
-
Deliver: familiarity with Agile/Scrum methodologies, metrics-driven decision-making, UAT, and release readiness.
-
Communication skills in order to provide executive-level updates, engage in vendor negotiation, and maintain clear documentation of decisions and processes.
The duties and responsibilities described here are not exhaustive and additional assignments, duties, or responsibilities may be required of this position. Assignments, duties, and responsibilities may be changed at any time, with or without notice, by Blackstone in its sole discretion.
COMPENSATION
- Expected annual base salary range: $106,000 - $170,000
Actual base salary within that range will be determined by several components including but not limited to the individual's experience, skills, qualifications and job location. For roles located outside of the US, please disregard the posted salary bands as these roles will follow a separate compensation process based on local market comparables.
Additional compensation and benefits offered in connection with the role consist of comprehensive health benefits, including but not limited to medical, dental, vision, and FSA benefits; paid time off; life insurance; 401(k) plan; and discretionary bonuses. Certain employees may also be eligible for equity and other incentive compensation at Blackstone’s sole discretion.
Blackstone is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity or expression, disability, genetic predisposition, veteran or military status, status as a victim of domestic violence, a sex offense or stalking, or any other class or status in accordance with applicable federal, state and local laws. This policy applies to all terms and conditions of employment, including but not limited to hiring, placement, promotion, termination, transfer, leave of absence, compensation, and training. All Blackstone employees, including but not limited to recruiting personnel and hiring managers, are required to abide by this policy.
If you need a reasonable accommodation to complete your application, please contact Human Resources at 212-583-5000 (US), +44 (0)20 7451 4000 (EMEA) or +852 3656 8600 (APAC).
Depending on the position, you may be required to obtain certain securities licenses if you are in a client facing role and/or if you are engaged in the following:
-
Attending client meetings where you are discussing Blackstone products and/or and client questions;
-
Marketing Blackstone funds to new or existing clients;
-
Supervising or training securities licensed employees;
-
Structuring or creating Blackstone funds/products; and
-
Advising on marketing plans prepared by a sales team or developing and/or contributing information for marketing materials.
Note: The above list is not the exhaustive list of activities requiring securities licenses and there may be roles that require review on a case-by-case basis. Please speak with your Blackstone Recruiting contact with any questions.
See all STEM OPT Enterprise Systems Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new STEM OPT Enterprise Systems Engineer Jobs.
Get Access To All JobsTips for Finding STEM OPT Authorization as an Enterprise Systems Engineer
Verify your CIP code before applying
Check that your degree's CIP code appears on the DHS STEM Designated Degree Program List. Computer Science, Systems Engineering, and Information Systems codes typically qualify, but interdisciplinary degrees sometimes don't. Confirm with your DSO before targeting STEM OPT roles.
Filter job postings by E-Verify status
Ask recruiters directly whether the company is enrolled in E-Verify before advancing to interviews. Federal contractors are required to use E-Verify, so roles at government-adjacent firms or defense primes often meet this requirement without extra confirmation steps.
Build your I-983 training plan around systems deliverables
Draft your I-983 training plan before your start date, mapping specific engineering objectives like system migrations, infrastructure audits, or ERP implementations to your STEM degree. Vague plans delay DSO approval and can push back your OPT extension start.
Target employers with active H-1B LCA filings
Use Migrate Mate to filter Enterprise Systems Engineer roles by employers with verified DOL Labor Condition Application filing history, so you're applying to companies that have already navigated visa sponsorship for technical roles rather than learning the process alongside you.
Check prevailing wage tiers for your target metro
Run your SOC code for Enterprise Systems Engineers through the OFLC Wage Search to see Level I through Level IV prevailing wages in your target city. If an offer falls below Level I, that can create LCA complications for any future H-1B visa transition with that employer.
Time your extension application to avoid gaps
File your STEM OPT extension with USCIS at least 90 days before your initial OPT EAD expires. If you file on time and your EAD expires while the application is pending, your employment authorization automatically continues for up to 180 days under the cap-gap provision.
Frequently Asked Questions
Does an Enterprise Systems Engineer role qualify for the STEM OPT extension?
It depends on your degree, not the job title. Your degree's CIP code must appear on the DHS STEM Designated Degree Program List. Degrees in Computer Science, Systems Engineering, Electrical Engineering, or Information Systems typically qualify. Confirm with your DSO before accepting an offer, since the extension is tied to your credential, not the employer's job description.
How do I confirm my employer is enrolled in E-Verify?
Ask the recruiter or HR contact directly whether the company is an active E-Verify participant. Federal contractors are required to enroll, so roles at those firms are reliable. For other employers, you can also ask them to share their E-Verify company ID. Your DSO won't approve the I-983 training plan for an employer that isn't enrolled, so confirm this before signing an offer.
What goes into the I-983 training plan for an Enterprise Systems Engineer?
The I-983 requires you to describe how your day-to-day engineering work relates to your STEM degree. For Enterprise Systems Engineers, that means documenting specific projects like ERP migrations, systems architecture decisions, or infrastructure automation, and connecting each to learning objectives from your degree program. Generic descriptions get flagged. Your employer must sign the plan, and your DSO must authorize it before your extension starts.
What happens to my work authorization if my H-1B is selected in the lottery but my OPT expires first?
If your employer files an H-1B petition on your behalf before your OPT EAD expires, the cap-gap provision extends your STEM OPT work authorization through September 30 of that fiscal year. You can continue working legally as an Enterprise Systems Engineer during this gap. USCIS automatically grants this extension, but your employer must file before your EAD lapses.
Where can I find Enterprise Systems Engineer jobs at E-Verify employers?
Migrate Mate filters Enterprise Systems Engineer roles by employers with verified E-Verify enrollment and DOL LCA filing history, so you're not guessing about sponsorship eligibility. You can also cross-reference O*NET for the official SOC code used to classify Enterprise Systems Engineer positions, which helps when evaluating whether a job posting maps to your STEM degree for the I-983 training plan.