TN Visa Systems Security Engineer Jobs
Systems Security Engineer roles qualify for TN visa sponsorship under the USMCA's Computer Systems Analyst category when the position requires designing or implementing security architectures. Canadian citizens can apply at the port of entry with no annual cap; Mexican citizens enter through consular processing with a limited annual allocation.
See All Systems Security Engineer JobsOverview
Showing 5 of 270+ Systems Security Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 270+ Systems Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Systems Security Engineer roles.
Get Access To All JobsINTRODUCTION
The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country; its mission is to combat municipal corruption. DOI serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds. The Information Technology Unit of the NYC Department of Investigation is currently seeking a highly skilled, motivated and hands-on System Security Engineer to manage and secure our environment, including Active Directory, Windows Servers, Exchange (on-prem and Online), Microsoft 365, AirWatch MDM, and file shares. This role supports system stability and cybersecurity readiness, emphasizing automation, practical risk management, prioritization, and collaboration, ensuring our core systems remain secure, efficient, and compliant within a small but capable IT team.
ROLE AND RESPONSIBILITIES
Key Responsibilities
- Active Directory Administration: Manage user accounts, permissions, and Group Policy Objects (GPOs); secure and monitor domain controllers.
- Exchange Management: Administer Exchange on-premises and Exchange Online hybrid environments, managing mail flow, mailbox provisioning, spam filtering, and secure mail routing.
- Security & Compliance: Apply Microsoft and CIS hardening baselines; enforce consistent GPO and Exchange security configurations; monitor logs for anomalies.
- Patch & Configuration Management: Implement and manage regular patching schedules for Windows Servers, Exchange systems, and related components.
- Monitoring & Response: Leverage Proofpoint, Varonis, Adaudit, SIEM, Endpoint Manager, and AirWatch MDM to monitor user activity, device compliance, system configurations, and mail flow. Investigate alerts and anomalies related to AD, Exchange, and endpoints to detect and respond promptly to potential security incidents.
- File Share Management: Maintain secure access controls and auditing for on-prem file shares; monitor for data access anomalies using Varonis.
- Certificates & PKI: Manage digital certificates, renewals, and certificate authorities (CAs) for servers, internal services, and authentication.
- Backup & Recovery: Ensure reliable backups for AD, Exchange, file shares, and critical servers; test restoration procedures regularly.
- Automation & Documentation: Develop PowerShell scripts to automate patching, mailbox management, and security reporting; maintain accurate operational documentation.
- Collaboration: Work cross-functionally with IT support and network teams to maintain a secure, resilient infrastructure.
If selected, the candidate will be fingerprinted and undergo a background investigation. In addition, because the position has a law enforcement and/or investigative function, the candidate's consumer credit history will be reviewed during the background investigation, as permitted by NYC Administrative Code 8-107(24)(b)(2)(A).
MINIMUM QUALIFICATIONS
- A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
- A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described in “1" above, including one year in a project leader capacity or as a major contributor on a complex project; or
- A satisfactory combination of education and experience that is equivalent to (1) or (2) above. College education may be substituted for up to two years of the required experience in (2) above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A master's degree in computer science or a related computer field may be substituted for one year of the required experience in (1) or (2) above. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.
PREFERRED QUALIFICATIONS
- Experience managing Active Directory, Exchange (on-prem and Online), and Microsoft 365 environments.
- Strong skills in Windows Server administration, patch management, and system hardening.
- Working knowledge of Proofpoint, Varonis, Ad Audit, SIEM, Endpoint Manager, and Workspace One MDM.
- Proficiency in PowerShell scripting for automation and auditing.
- Familiarity with certificate management (PKI) and file share security.
- Experience with VMware or Hyper-V virtualization platforms.
- Focus: A practical, security-focused administrator ensuring uptime, resilience, and protection across identity, messaging, and data-sharing systems within a lean operational model.
COMPENSATION
- Salary: $52,426.00 – $117,295.00
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for two continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of the interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
INTRODUCTION
The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country; its mission is to combat municipal corruption. DOI serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds. The Information Technology Unit of the NYC Department of Investigation is currently seeking a highly skilled, motivated and hands-on System Security Engineer to manage and secure our environment, including Active Directory, Windows Servers, Exchange (on-prem and Online), Microsoft 365, AirWatch MDM, and file shares. This role supports system stability and cybersecurity readiness, emphasizing automation, practical risk management, prioritization, and collaboration, ensuring our core systems remain secure, efficient, and compliant within a small but capable IT team.
ROLE AND RESPONSIBILITIES
Key Responsibilities
- Active Directory Administration: Manage user accounts, permissions, and Group Policy Objects (GPOs); secure and monitor domain controllers.
- Exchange Management: Administer Exchange on-premises and Exchange Online hybrid environments, managing mail flow, mailbox provisioning, spam filtering, and secure mail routing.
- Security & Compliance: Apply Microsoft and CIS hardening baselines; enforce consistent GPO and Exchange security configurations; monitor logs for anomalies.
- Patch & Configuration Management: Implement and manage regular patching schedules for Windows Servers, Exchange systems, and related components.
- Monitoring & Response: Leverage Proofpoint, Varonis, Adaudit, SIEM, Endpoint Manager, and AirWatch MDM to monitor user activity, device compliance, system configurations, and mail flow. Investigate alerts and anomalies related to AD, Exchange, and endpoints to detect and respond promptly to potential security incidents.
- File Share Management: Maintain secure access controls and auditing for on-prem file shares; monitor for data access anomalies using Varonis.
- Certificates & PKI: Manage digital certificates, renewals, and certificate authorities (CAs) for servers, internal services, and authentication.
- Backup & Recovery: Ensure reliable backups for AD, Exchange, file shares, and critical servers; test restoration procedures regularly.
- Automation & Documentation: Develop PowerShell scripts to automate patching, mailbox management, and security reporting; maintain accurate operational documentation.
- Collaboration: Work cross-functionally with IT support and network teams to maintain a secure, resilient infrastructure.
If selected, the candidate will be fingerprinted and undergo a background investigation. In addition, because the position has a law enforcement and/or investigative function, the candidate's consumer credit history will be reviewed during the background investigation, as permitted by NYC Administrative Code 8-107(24)(b)(2)(A).
MINIMUM QUALIFICATIONS
- A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
- A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described in “1" above, including one year in a project leader capacity or as a major contributor on a complex project; or
- A satisfactory combination of education and experience that is equivalent to (1) or (2) above. College education may be substituted for up to two years of the required experience in (2) above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A master's degree in computer science or a related computer field may be substituted for one year of the required experience in (1) or (2) above. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.
PREFERRED QUALIFICATIONS
- Experience managing Active Directory, Exchange (on-prem and Online), and Microsoft 365 environments.
- Strong skills in Windows Server administration, patch management, and system hardening.
- Working knowledge of Proofpoint, Varonis, Ad Audit, SIEM, Endpoint Manager, and Workspace One MDM.
- Proficiency in PowerShell scripting for automation and auditing.
- Familiarity with certificate management (PKI) and file share security.
- Experience with VMware or Hyper-V virtualization platforms.
- Focus: A practical, security-focused administrator ensuring uptime, resilience, and protection across identity, messaging, and data-sharing systems within a lean operational model.
COMPENSATION
- Salary: $52,426.00 – $117,295.00
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for two continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of the interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
See all 270+ Systems Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Systems Security Engineer roles.
Get Access To All JobsTips for Finding TN Visa Sponsorship as a Systems Security Engineer
Frame your credentials around specialty occupation
TN approval for Systems Security Engineer roles hinges on demonstrating that your degree field matches the role's security architecture or engineering focus. A computer science or information systems degree supports the filing; a general IT degree without relevant specialization can draw scrutiny.
Target employers with recent visa filing experience
Before applying, look for employers with recent visa filings for technical roles. Employers already experienced with work visa sponsorship processes are far more likely to understand TN eligibility requirements and move quickly through the offer process.
Clarify the Computer Systems Analyst classification upfront
Systems Security Engineers qualify under TN's Computer Systems Analyst category, not a dedicated security engineering category. Confirm with the hiring team that your offer letter describes security architecture, systems analysis, or network security design rather than general IT support or administration.
Use Migrate Mate to identify TN-ready employers
Search Migrate Mate to find Systems Security Engineer roles posted by employers with documented TN and H-1B sponsorship history. Targeting pre-screened employers cuts the back-and-forth of explaining TN eligibility from scratch to unfamiliar HR teams.
Prepare a support letter that addresses specialty occupation
Your employer's support letter must describe the role's duties in terms that map to specialty occupation criteria: system vulnerability analysis, security architecture design, or compliance framework implementation. Generic job description language copied from a posting is a common reason for TN requests of evidence.
Understand the Mexican TN consular process timeline
Mexican citizens must schedule a consular interview at a U.S. embassy or consulate rather than applying at a port of entry. Build at least four to six weeks into your start date negotiation to account for appointment availability and USCIS processing, especially for roles with security clearance requirements.
Systems Security Engineer jobs are hiring across the US. Find yours.
Find Systems Security Engineer JobsSystems Security Engineer TN Visa: Frequently Asked Questions
Does Systems Security Engineer qualify for TN visa sponsorship?
Yes, Systems Security Engineer roles qualify under the TN visa's Computer Systems Analyst category, provided the position requires at least a bachelor's degree in computer science, engineering, or a related field. The offer letter and employer support letter must describe duties focused on security architecture, vulnerability analysis, or systems security design rather than general IT administration.
How does TN compare to H-1B for Systems Security Engineers?
TN has no annual lottery and no numerical cap for Canadian citizens, so approval can happen the same day at the port of entry. H-1B requires entering a randomized lottery with roughly a one-in-four chance of selection and a wait of six months or more before the start date. For Mexicans, TN requires consular processing but still avoids the H-1B lottery entirely.
What documents does my employer need to sponsor my TN visa?
Your employer must provide a support letter on company letterhead that states your job title, a description of duties tied to TN eligibility criteria, your required credentials, the employment start and end dates, and your offered compensation. This support letter is your primary documentation—there is no government filing or certification process for TN visas, unlike H-1B or E-3. The letter functions as the employer's declaration of the role's professional nature and your qualifications for the TN category.
Where can I find Systems Security Engineer jobs with TN visa sponsorship?
Migrate Mate is built specifically for Canadian and Mexican professionals seeking U.S. roles with TN visa sponsorship. You can filter directly for Systems Security Engineer positions posted by employers familiar with TN requirements, which reduces the time spent educating HR teams about the visa category from scratch.
Can I switch employers on a TN visa without losing status?
Yes, but each employer change requires a new TN authorization. Canadians can present the new employer's support letter at a port of entry to obtain a fresh TN. Mexicans must go through consular processing again. There is no portability provision equivalent to H-1B's AC21 rule, so you cannot start with the new employer until the new TN is approved.
See which Systems Security Engineer employers are hiring and sponsoring visas right now.
Search Systems Security Engineer Jobs