STEM OPT Network Security Engineer Jobs
Network Security Engineer roles qualify for the 24-month STEM OPT extension when your degree falls under an eligible CIP code and your employer is enrolled in E-Verify. You'll need a STEM degree in computer science, information security, or a related field, plus a signed I-983 training plan before your extension starts.
See All Network Security Engineer JobsOverview
Showing 5 of 28+ Network Security Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Network Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Network Security Engineer roles.
Get Access To All JobsMust Have Technical/Functional Skills
- Technical expertise and hands-on experience with enterprise-grade Firewall platforms (e.g., Palo Alto Networks, Check Point, Cisco ASA/FTD).
- Knowledge and practical experience with Web Proxy solutions (e.g., Zscaler, Forcepoint/Websense, Blue Coat/Symantec ProxySG).
- Understanding of network protocols (TCP/IP, DNS, HTTP/S, VPNs) and network security concepts (e.g., IDS/IPS, VPN, NAT, load balancing).
- Proficiency in analyzing network traffic and logs to identify security incidents, troubleshoot connectivity issues, and optimize performance.
- Experience with scripting (e.g., Python, PowerShell) for automation of security tasks is a plus.
- Excellent problem-solving, analytical, and diagnostic capabilities.
- Strong communication and interpersonal skills, with the ability to articulate complex technical concepts clearly to diverse audiences.
- Ability to work independently as an SME and as part of a larger technical team.
Roles & Responsibilities
Overview:
We are seeking a Network Security Engineer to serve as a Subject Matter Expert (SME) in Web Proxy and Firewall rules maintenance, specifically supporting a significant divestiture initiative. This individual contributor will be responsible for the configuration, optimization, and troubleshooting of web proxy and firewall policies, ensuring robust network security and seamless transition of services during the divestiture. The role requires deep technical expertise, meticulous attention to detail, and the ability to work collaboratively within a dynamic environment.
Key Responsibilities:
- Act as the primary SME for all Web Proxy (e.g., Zscaler, Forcepoint, Blue Coat) and Firewall (e.g., Palo Alto Networks, Check Point, Cisco ASA) rule sets and configurations.
- Design, implement, and maintain complex firewall rules and web proxy policies to enforce security controls and meet divestiture requirements.
- Perform routine maintenance, updates, and optimization of existing web proxy and firewall rules, ensuring adherence to security best practices and compliance standards.
- Provide advanced troubleshooting and incident response support for network security issues related to web proxy and firewall configurations.
- Collaborate with network engineering, application, and security operations teams to ensure proper integration and functionality of security devices during the divestiture process.
- Assist in the planning and execution of network segmentation and access control list (ACL) migration strategies for separating entities.
- Develop and maintain comprehensive documentation for network security configurations, policies, and operational procedures.
- Participate in security audits and provide expert guidance on web proxy and firewall capabilities.
Qualifications
- Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related engineering field.
- Experience:
- Minimum of 3-5 years of dedicated experience in Network Security Engineering.
- At least 2-3 years of hands-on experience specifically managing and maintaining Web Proxy and Firewall solutions in an enterprise environment.
- Proven experience acting as a Subject Matter Expert in network security domains.
- Relevant industry certifications such as CCNA Security, PCNSE (Palo Alto Networks Certified Network Security Engineer), CCSA/CCSE (Check Point Certified Security Administrator/Expert), Zscaler certifications (ZCCA, ZCSE) are desirable.
- Required: English fluency (oral and written).
Salary Range
$110,000 to $125,000 per year
Location
Irving, TX
Job Function
TECHNOLOGY
Role
Engineer
Job Id
408583
Desired Skills
Security
Salary Range
$110,000-$125,000 a year
Desired Candidate Profile
Qualifications: BACHELOR OF COMPUTER SCIENCE
Must Have Technical/Functional Skills
- Technical expertise and hands-on experience with enterprise-grade Firewall platforms (e.g., Palo Alto Networks, Check Point, Cisco ASA/FTD).
- Knowledge and practical experience with Web Proxy solutions (e.g., Zscaler, Forcepoint/Websense, Blue Coat/Symantec ProxySG).
- Understanding of network protocols (TCP/IP, DNS, HTTP/S, VPNs) and network security concepts (e.g., IDS/IPS, VPN, NAT, load balancing).
- Proficiency in analyzing network traffic and logs to identify security incidents, troubleshoot connectivity issues, and optimize performance.
- Experience with scripting (e.g., Python, PowerShell) for automation of security tasks is a plus.
- Excellent problem-solving, analytical, and diagnostic capabilities.
- Strong communication and interpersonal skills, with the ability to articulate complex technical concepts clearly to diverse audiences.
- Ability to work independently as an SME and as part of a larger technical team.
Roles & Responsibilities
Overview:
We are seeking a Network Security Engineer to serve as a Subject Matter Expert (SME) in Web Proxy and Firewall rules maintenance, specifically supporting a significant divestiture initiative. This individual contributor will be responsible for the configuration, optimization, and troubleshooting of web proxy and firewall policies, ensuring robust network security and seamless transition of services during the divestiture. The role requires deep technical expertise, meticulous attention to detail, and the ability to work collaboratively within a dynamic environment.
Key Responsibilities:
- Act as the primary SME for all Web Proxy (e.g., Zscaler, Forcepoint, Blue Coat) and Firewall (e.g., Palo Alto Networks, Check Point, Cisco ASA) rule sets and configurations.
- Design, implement, and maintain complex firewall rules and web proxy policies to enforce security controls and meet divestiture requirements.
- Perform routine maintenance, updates, and optimization of existing web proxy and firewall rules, ensuring adherence to security best practices and compliance standards.
- Provide advanced troubleshooting and incident response support for network security issues related to web proxy and firewall configurations.
- Collaborate with network engineering, application, and security operations teams to ensure proper integration and functionality of security devices during the divestiture process.
- Assist in the planning and execution of network segmentation and access control list (ACL) migration strategies for separating entities.
- Develop and maintain comprehensive documentation for network security configurations, policies, and operational procedures.
- Participate in security audits and provide expert guidance on web proxy and firewall capabilities.
Qualifications
- Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related engineering field.
- Experience:
- Minimum of 3-5 years of dedicated experience in Network Security Engineering.
- At least 2-3 years of hands-on experience specifically managing and maintaining Web Proxy and Firewall solutions in an enterprise environment.
- Proven experience acting as a Subject Matter Expert in network security domains.
- Relevant industry certifications such as CCNA Security, PCNSE (Palo Alto Networks Certified Network Security Engineer), CCSA/CCSE (Check Point Certified Security Administrator/Expert), Zscaler certifications (ZCCA, ZCSE) are desirable.
- Required: English fluency (oral and written).
Salary Range
$110,000 to $125,000 per year
Location
Irving, TX
Job Function
TECHNOLOGY
Role
Engineer
Job Id
408583
Desired Skills
Security
Salary Range
$110,000-$125,000 a year
Desired Candidate Profile
Qualifications: BACHELOR OF COMPUTER SCIENCE
See all Network Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Network Security Engineer roles.
Get Access To All JobsTips for Finding STEM OPT Authorization as a Network Security Engineer
Verify your CIP code qualifies first
Check your degree's Classification of Instructional Programs code against the DHS STEM Designated Degree Program List before applying. Computer science, cybersecurity, and information assurance codes typically qualify, but electrical engineering or mathematics degrees may require your DSO to confirm eligibility.
Confirm E-Verify enrollment before accepting offers
Your employer must be actively enrolled in E-Verify before your STEM OPT extension can begin. Search the E-Verify employer search tool or ask the recruiter for their E-Verify Company ID number during the offer stage, not after signing.
Build a network security credential portfolio early
Certifications like CISSP, CompTIA Security+, or CEH signal to hiring managers that your skills transfer directly to U.S. enterprise security environments. Employers filing I-983 training plans for network security roles expect documented technical competencies tied to specific learning objectives.
Target employers with active LCA filings in security roles
Search Migrate Mate to identify employers who have filed Labor Condition Applications for network security or information security positions. LCA filing history shows which companies have already navigated STEM OPT and H-1B sponsorship for similar roles.
Draft your I-983 training objectives before the offer stage
Network security engineers can map training goals to specific NIST frameworks, SOC operations, or penetration testing projects your employer will assign. Having a draft ready speeds up the employer sign-off process and signals you understand the STEM OPT training plan requirement.
Time your extension filing to protect cap-gap coverage
If your employer files an H-1B petition before your OPT expires, cap-gap rules extend your work authorization through September 30 of that year. File your STEM OPT extension at least 90 days before your initial OPT end date to avoid any gap in authorization.
Network Security Engineer jobs are hiring across the US. Find yours.
Find Network Security Engineer JobsFrequently Asked Questions
Does my degree qualify me for the STEM OPT extension as a network security engineer?
Your degree qualifies if it appears on the DHS STEM Designated Degree Program List. Degrees in computer science, cybersecurity, information assurance, electrical engineering, and applied mathematics commonly support network security roles. Check the specific Classification of Instructional Programs code on your degree with your DSO, since the job title alone doesn't determine eligibility.
What does the I-983 training plan need to cover for a network security engineer role?
Your I-983 must describe specific learning objectives tied to your actual job duties, not a generic job description. For network security engineers, that means outlining training in areas like intrusion detection, firewall management, vulnerability assessment, or incident response. Your employer signs the plan and must evaluate your progress at the six-month and twelve-month marks throughout the extension period.
How do I confirm my employer is enrolled in E-Verify before my STEM OPT extension starts?
Ask the recruiter or HR contact for the company's E-Verify Company ID number during the offer stage. You can also search the E-Verify employer search tool using the company name to confirm active enrollment. If the employer isn't enrolled, they cannot legally employ you on a STEM OPT extension, and enrollment must be completed before your extension begins.
How does cap-gap work if I'm on STEM OPT and my employer files an H-1B petition?
If your employer files a timely H-1B petition before your STEM OPT expires, cap-gap provisions automatically extend your work authorization through September 30 of the fiscal year the petition is pending. You can continue working in your network security engineer role during this period. USCIS provides guidance on the specific timely filing requirements that trigger cap-gap protection.
Where can I find network security engineer jobs where employers are already familiar with STEM OPT?
Migrate Mate filters network security engineer listings by employers with verified E-Verify enrollment and LCA filing history, so you can target companies that have already sponsored STEM OPT and H-1B workers in security roles. This reduces the back-and-forth of explaining authorization requirements to employers who haven't hired international graduates before.
See which Network Security Engineer employers are hiring and sponsoring visas right now.
Search Network Security Engineer Jobs